> From: "A. Schulze" <s...@andreasschulze.de>

> > TSIG uses DNS names for encoding the algorithm type.
> I didn't expected that...

Beware that a very popular TSIG implementation is intermittently
confused by upper case algorithm names from a peer despite the fact
that they're encoded like domain names.  If you're writing code that
talks TSIG, I suggest doing what I finally did recently, which is
converting algorithm names to lower case as you put them on or take
them off the wire.

One might constrain local user configuration settings to lower case,
but I'd still ignore case when comparing with what comes off the wire.


Vernon Schryver    v...@rhyolite.com

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to