Add DNS debug aid if we requsted AD but got AA

[exim.git] / src / src / verify.c

diff --git a/src/src/verify.c b/src/src/verify.c
index 10cef82f14055eb1b4753a3a8faa9b63e61679d9..506b7e09b29f06fd739b7b83294e4c7334b69034 100644 (file)
--- a/src/src/verify.c
+++ b/src/src/verify.c
@@ -3245,6 +3245,10 @@ if (*t == 0)
   h.address = NULL;
   h.mx = MX_NONE;
 
+  /* Using byname rather than bydns here means we cannot determine dnssec
+  status.  On the other hand it is unclear how that could be either
+  propagated up or enforced. */
+
   rc = host_find_byname(&h, NULL, HOST_FIND_QUALIFY_SINGLE, NULL, FALSE);
   if (rc == HOST_FOUND || rc == HOST_FOUND_LOCAL)
     {