Today we are releasing PowerDNS Recursor 4.4.2.
This release fixes a bug where the wrong type could be used while verifying DNSSEC signatures, causing domains to be incorrectly marked as Bogus. Additionally, the recursor no longer resolves unneeded names when chasing CNAME records if QName Minimization is enabled. The recursor now also logs more detailed information if a name is found to be Bogus during DNSSEC validation.
As usual, there were also other smaller enhancements and bugfixes. Please refer to the 4.4.2 changelog for details.
4.1 and older releases are EOL, refer to the documentation for details about our release cycles.