Work fork of an Android Jabber client for bridge users
git.sr.ht/~singpolyma/cheogram-android
sopranica
sgx
xmpp
jabber
Never fall back to iterative DNS for DNSSEC
This can work around if your local resolver strips DNSSEC, but also it
means resolution is bonkers slow and might even take forever / fail if
DNS queries are blocked (because you're on TOR VPN or similar). So if
recursive DNSSEC fails, just fail DNSSEC and fall back to regular DNS lookups.
Stephen Paul Weber
(Jan 6, 2026, 10:32 AM EST)
d8152c41
d0488fb8
+2
+2
src/main/java/eu/siacs/conversations/utils/Resolver.java
+2
src/main/java/eu/siacs/conversations/utils/Resolver.java
···
234
234
final AbstractDnsClient dnssecclient = DnssecResolverApi.INSTANCE.getClient();
235
235
if (dnssecclient instanceof ReliableDnsClient) {
236
236
((ReliableDnsClient) dnssecclient).setUseHardcodedDnsServers(false);
237
+
// If your DNS server sucks, just don't do DNSSEC
238
+
((ReliableDnsClient) dnssecclient).setMode(ReliableDnsClient.Mode.recursiveOnly);
237
239
}
238
240
}
239
241