KXRecordValidator
class KXRecordValidator implements DnsRecordValidatorInterface (View source)
KX Record Validator
KX (Key Exchanger) records provide an authenticatable method of delegating authorization for one node to provide key exchange services on behalf of one or more nodes. They are similar in structure to MX records but are used for key exchange delegation rather than mail exchange.
Format:
Where:
- preference: A 16-bit unsigned integer (0-65535) indicating the preference Lower values have higher preference, similar to MX record priority.
- exchanger: A domain name that specifies the DNS name of the host willing to act as a key exchanger for the owner name.
Example: 10 kx.example.com
Important security note: RFC 2230 specifies that KX records MUST be signed using DNSSEC and that unsigned KX records MUST be ignored to avoid security vulnerabilities. Systems not implementing Secure DNS should ignore KX records.
Methods
Validate KX record according to RFC 2230
Details
__construct(ConfigurationManager $config)
No description
ValidationResult
validate(string $content, string $name, mixed $prio, int|string|null $ttl, int $defaultTTL, mixed ...$args)
Validate KX record according to RFC 2230