diff --git a/go.mod b/go.mod
index 89c73828..94a48db9 100644
--- a/go.mod
+++ b/go.mod
@@ -14,7 +14,7 @@ require (
 	github.com/hashicorp/golang-lru v0.5.3
 	github.com/jedisct1/dlog v0.0.0-20190909160351-692385b00b84
 	github.com/jedisct1/go-clocksmith v0.0.0-20190707124905-73e087c7979c
-	github.com/jedisct1/go-dnsstamps v0.0.0-20191014002100-c2d13697a562
+	github.com/jedisct1/go-dnsstamps v0.0.0-20191014084838-3e6e00f2b602
 	github.com/jedisct1/go-minisign v0.0.0-20190909160543-45766022959e
 	github.com/jedisct1/xsecretbox v0.0.0-20190909160646-b731c21297f9
 	github.com/k-sone/critbitgo v1.3.0
diff --git a/go.sum b/go.sum
index 8ec72ec7..6c0ed624 100644
--- a/go.sum
+++ b/go.sum
@@ -29,8 +29,8 @@ github.com/jedisct1/dlog v0.0.0-20190909160351-692385b00b84 h1:7Q8p5MNx7fMvIRFir
 github.com/jedisct1/dlog v0.0.0-20190909160351-692385b00b84/go.mod h1:YXh1b5j+lwirsCCtTJW19DrbpaL9/5UzwNjI78Cvrg8=
 github.com/jedisct1/go-clocksmith v0.0.0-20190707124905-73e087c7979c h1:a/NQUT7AXkEfhaZ+nb7Uzqijo1Qc7C7SZpRrv+6UQDA=
 github.com/jedisct1/go-clocksmith v0.0.0-20190707124905-73e087c7979c/go.mod h1:SAINchklztk2jcLWJ4bpNF4KnwDUSUTX+cJbspWC2Rw=
-github.com/jedisct1/go-dnsstamps v0.0.0-20191014002100-c2d13697a562 h1:IAhd67mYXfbNe3HEasqunc2Bz6ZK1FF5eDLBnyKUyB4=
-github.com/jedisct1/go-dnsstamps v0.0.0-20191014002100-c2d13697a562/go.mod h1:PCThSkefP5QIL83fIkZ3Qi5Jt02JlWTFB1j9h69Sf2Y=
+github.com/jedisct1/go-dnsstamps v0.0.0-20191014084838-3e6e00f2b602 h1:5uRCzBAhT+2HfJYnQljeiMmethbUOrYHFSO6lMx2RJg=
+github.com/jedisct1/go-dnsstamps v0.0.0-20191014084838-3e6e00f2b602/go.mod h1:PCThSkefP5QIL83fIkZ3Qi5Jt02JlWTFB1j9h69Sf2Y=
 github.com/jedisct1/go-minisign v0.0.0-20190909160543-45766022959e h1:UvSe12bq+Uj2hWd8aOlwPmoZ+CITRFrdit+sDGfAg8U=
 github.com/jedisct1/go-minisign v0.0.0-20190909160543-45766022959e/go.mod h1:G1CVv03EnqU1wYL2dFwXxW2An0az9JTl/ZsqXQeBlkU=
 github.com/jedisct1/xsecretbox v0.0.0-20190909160646-b731c21297f9 h1:nGfB2s9K0GyHuNkJmXkIjP+m7je6Q6gjirr+weAEtDo=
diff --git a/vendor/github.com/jedisct1/go-dnsstamps/dnsstamps.go b/vendor/github.com/jedisct1/go-dnsstamps/dnsstamps.go
index 3ffb19c1..b3141418 100644
--- a/vendor/github.com/jedisct1/go-dnsstamps/dnsstamps.go
+++ b/vendor/github.com/jedisct1/go-dnsstamps/dnsstamps.go
@@ -249,9 +249,9 @@ func newDNSCryptRelayStamp(bin []byte) (ServerStamp, error) {
 		return stamp, errors.New("Stamp is too short")
 	}
 	binLen := len(bin)
-	pos := 0
+	pos := 1
 	length := int(bin[pos])
-	if 1+length >= binLen-pos {
+	if 1+length > binLen-pos {
 		return stamp, errors.New("Invalid stamp")
 	}
 	pos++
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 9bdc4104..a0ec14f8 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -29,7 +29,7 @@ github.com/hashicorp/golang-lru/simplelru
 github.com/jedisct1/dlog
 # github.com/jedisct1/go-clocksmith v0.0.0-20190707124905-73e087c7979c
 github.com/jedisct1/go-clocksmith
-# github.com/jedisct1/go-dnsstamps v0.0.0-20191014002100-c2d13697a562
+# github.com/jedisct1/go-dnsstamps v0.0.0-20191014084838-3e6e00f2b602
 github.com/jedisct1/go-dnsstamps
 # github.com/jedisct1/go-minisign v0.0.0-20190909160543-45766022959e
 github.com/jedisct1/go-minisign