Technitium is non-compliant with RFC 7873 and RFC 9018 DNS Cookies

[vincejv]

Unbound has already implemented it 2 years ago afaik

Linking for reference implementation

• Downstream DNS Server Cookies a la RFC7873 and RFC9018 NLnetLabs/unbound#762
• Cookie secret file NLnetLabs/unbound#1090

Sample dig command for DNS cookies (DNS Server is from ISP, which is DNS cookie compliant), this is the same format as with unbound, these are missing with Technitium

$ dig @124.6.181.169 google.com

; <<>> DiG 9.20.0 <<>> @124.6.181.169 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42107
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
; COOKIE: f3d6703898b0514d98f3e38767591c26ee4f73936984af75 (good)
;; QUESTION SECTION:
;google.com.                    IN      A

;; ANSWER SECTION:
google.com.             236     IN      A       142.251.220.206

;; Query time: 10 msec
;; SERVER: 124.6.181.169#53(124.6.181.169) (UDP)
;; WHEN: Wed Dec 11 12:59:18 PST 2024
;; MSG SIZE  rcvd: 83

[vincejv]

RFC 7873: https://datatracker.ietf.org/doc/html/rfc7873
RFC 9018: https://datatracker.ietf.org/doc/rfc9018

[ShreyasZare]

Thanks for the post. Yes, DNS Cookies are not yet implemented. It will be taken up after the planned features with higher priority are implemented.