Re: Executive Order 14144 - encrypted DNS

2025-01-29 Thread Stephen Farrell
Hiya, On 29/01/2025 02:58, Michael De Roover wrote: I appreciate the confirmation of this being about DoT/DoH Do we have any opinions as to whether the document (which I've not read, sorry;-) has anything to say about ADoT? Ta, S. OpenPGP_signature.asc Description: OpenPGP digital signatu

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hiya, On 20/06/2024 14:34, Ondřej Surý wrote: Stephen, you actually gave me an idea - you should use BIND version without HTTPS record support and just convert the records to TYPExxx form. That way, there will be no parser standing in your way and you can put all kind of rubbish to the zone.

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hi again, Actually, it may well be that bind allows me sufficient leeway to do most of the tests I want, so this is just to check that there's no imminent plan to have bind disallow the kind of rubbish HTTPS RRs below. If that's not likely to change in the next few months, then I'd say I'm fine.

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hiya, Thanks all for the info/suggestions. I guess I'll have to try what Ondřej suggests or something similar, and that's ok. Cheers, S. OpenPGP_0xE4D8E9F997A833DD.asc Description: OpenPGP public key OpenPGP_signature.asc Description: OpenPGP digital signature -- Visit https://lists.isc.or

can I provide invalid HTTPS values for testing?

2024-06-19 Thread Stephen Farrell
Hiya, Apologies if this is a repeat, I spent a bit of time looking but didn't find stuff... I'd like to publish various HTTPS RRs with dodgy encodings in order to test which clients handle things well or badly. Were it possible to use nsupdate for that, that'd make my life simpler, but I've no