mirror of
https://blitiri.com.ar/repos/chasquid
synced 2026-10-28 15:02:28 +00:00
71af456be7
Today, when looking up DKIM keys via DNS, we go through all the TXT records that are published. This is already more lenient than what's allowed by many implementations (as documented in the code). Potentially, someone could craft a domain with a lot of TXT records to make us waste time processing those keys. To help reduce that possibility, this patch limits the lookup to 3 records. This is still more than normal and may be limited further to 1 in the future.