DNSSEC for tinydns

This project adds DNSSEC support to D. J. Bernstein's tinydns.

It consists of two parts (mostly):

The patch tries to preserve the behaviour of tinydns/axfrdns wrt non-DNSSEC queries, with these noteworthy exceptions:

Be careful with publishing signed zones as a secondary nameserver: the modified tinydns/axfrdns require certain helper RRs in the database to simplify locating NSEC3 records. Without these helpers, tinydns cannot generate valid negative response nor valid wildcard responses.

Axfrdns will publish these helper RRs, other primaries will most likely not.