All issues

Search results

feat(dnssec): evaluate Daddybound enforcement readiness

Status: Open.

#67 In jameshoulder/dnsdaddy;

· jameshoulder opened on Sep 9, 2026

Daddybound: widen the live differential corpus beyond one resolver's view

Status: Open.

#65 In jameshoulder/dnsdaddy;

· jameshoulder opened on Sep 9, 2026

Daddybound: close the last zone-cut assumption by discovering delegations rather than assuming

Status: Open.

#64 In jameshoulder/dnsdaddy;

· jameshoulder opened on Sep 9, 2026

Sigma rule export from the finding schema

Status: Open.

#24 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Behavioural baselining: "unusual for this network" needs a poisoning-resistant learning window

Status: Open.

#23 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Five open Dependabot major-version action bumps need review

Status: Open.

#22 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Semgrep registry rulesets are fetched at run time and cannot be pinned

Status: Open.

#21 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Webhook sink for findings

Status: Open.

#20 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Word-list DGA detection: the current heuristic misses dictionary generators entirely

Status: Open.

#19 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

Measure detector false-positive rates before any of them is allowed to block

Status: Open.

#18 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

DNS rebinding is not mitigated: private addresses are not filtered from upstream answers

Status: Open.

#17 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026

No per-client rate limiting: one authorised client can saturate the resolver

Status: Open.

#16 In jameshoulder/dnsdaddy;

· jameshoulder opened on Aug 15, 2026