Enum SecureCnameStatus 

pub enum SecureCnameStatus {
    SecureAlias,
    NotSecureAlias,
    TempFail(String),
}

The outcome of an explicit CNAME lookup used to decide DANE eligibility for an MX host whose address chain was not fully DNSSEC-secure.

RFC 7672 section 2.2.2 treats an MX host that is a securely published CNAME alias as DANE-eligible at the original (unexpanded) name, even when the alias target lands in an insecure (unsigned) zone: it is the securely published TLSA RRset, not the address records, that authenticates the peer.

Variants

SecureAlias

The name is a CNAME alias whose alias record was DNSSEC validated, so the host remains DANE-eligible at its original name.

NotSecureAlias

The name is not a securely published CNAME alias (it is not an alias at all, or the alias was not DNSSEC validated); it is not the secure-CNAME case and DANE must not be engaged off the back of it.

TempFail(String)

The secure status of the alias could not be determined (SERVFAIL, timeout, or a DNSSEC validation failure). To preserve downgrade resistance the caller must defer rather than continue.

Trait Implementations

impl Debug for SecureCnameStatus

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SecureCnameStatus

fn eq(&self, other: &SecureCnameStatus) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SecureCnameStatus

impl StructuralPartialEq for SecureCnameStatus