A possibly stupid random thought: is there a strong barrier in *all*
kernels which enforces 127.0.0.0/8 and ::1 to actually *have* to be
local?

The 240/4 problem is 5-6 lines of code in *some* UNIX. It wasn't in
any sense globally applied.

I suspect localhost is somewhat more strongly coded, but I did wonder
because Ted's suggestion that use of the literal IP address in either
family would the stronger 'keep it local' made me think: what if
somebody hand installed a route which somehow took it off-box?

I think proscriptive/definitive language over the FQDN/label localhost
in DNSSEC is probably still a good thing.  IETF is defining behaviours
for home.arpa in HOMENET which logistically fall into a very similar
bucket (for me at least) so its not like we can't chose to say what
behaviours we expect of a label.

-G

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to