On 11/6/22 11:12 AM, Carl Byington via bind-users wrote:
or use $clientname.66.136.193.in-addr.arpa. as the intermediate zone
which has a slight advantage when the same client has multiple
disjoint parts of the same /24.
On 06.11.22 20:08, Grant Taylor via bind-users wrote:
I find that $CLIENTNAME or some other stand in for the client is a
potential for information lek.
I agree, the client may want to stay private.
There is nothing inherent in the CNAME to non-identifying RNAMEs that
leaks any client identifying information.
Conversely the client is in charge of what information they put in the
sub-zone, so it's not the ISP leaking client identifying information.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users