Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Petr Menšík
On 11. 06. 22 5:56, Viktor Dukhovni wrote: On Fri, Jun 10, 2022 at 09:16:11PM +0200, Petr Menšík wrote: - first is libc interface getaddrinfo() provided by nss plugins. Names can be resolved also by different protocols than just DNS. A good examples might be MDNS (RFC 6762), LLMNR (RFC 4795) or

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 02:31:37PM +0200, Petr Menšík wrote: > >> - how should single label names be handled? > > > > Local policy. > > I have made some tests. nss plugins in glibc do not allow trying single > label applied with search domain in dns. Then try other plugins like > llmnr. Then as

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Dave Lawrence
Viktor Dukhovni writes: > Single label names passed to getaddrinfo(3) should not result in single > label "A" or "" DNS queries. http://ai./ Admittedly a rarity, and in general problematic in other contexts. My own corporate VPN won't even allow a proper DNS lookup of it (or any address look

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Peter Thomassen
Hi Dave, On 6/15/22 19:33, Dave Lawrence wrote: Kind of surprising to me the number of TLDs who report their address as 127.0.53.53: .arab .cpa .kids .music .xn--mxtq1m (Chinese: "government") .xn--ngbrx (Urdu: "Arab") This looks reminiscent of the 2014 NCAP approach for new gTLDs: https://w

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Paul Vixie via dns-operations
--- Begin Message --- Dave Lawrence wrote on 2022-06-15 10:33: Viktor Dukhovni writes: Single label names passed to getaddrinfo(3) should not result in single label "A" or "" DNS queries. http://ai./ https://www.icann.org/en/system/files/files/sac-053-en.pdf -- P Vixie --- End Messag

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Dave Lawrence via dns-operations
--- Begin Message --- Vix said: > https://www.icann.org/en/system/files/files/sac-053-en.pdf Yep, thanks for bringing it up. Genuinely appreciated. I'm aware "SSAC also recommends that the use of DNS resource records such as A, , and MX in the apex of a TopLevel Domain (TLD) be contractually

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 01:33:51PM -0400, Dave Lawrence wrote: > Viktor Dukhovni writes: > > Single label names passed to getaddrinfo(3) should not result in single > > label "A" or "" DNS queries. > > http://ai./ Well aware of it, and that's why I wrote "worst case you'll actually get an an

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 04:24:01PM -0400, Dave Lawrence via dns-operations wrote: > I'm aware "SSAC also recommends that the use of DNS resource records > such as A, , and MX in the apex of a TopLevel Domain (TLD) be > contractually prohibited where appropriate and strongly discouraged in > a

[dns-operations] Checklist for DNS server implementations

2022-06-15 Thread Fred Morris
Self explanatory? Like an OWASP top ten? Background: I'm implementing a service to query $some_data via the DNS as a convenience. I've done this before, several times, and usually to break the DNS in some fashion or other, but this time I'm actually trying to faithfully present data. Plus, it's n

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread John Levine
It appears that Viktor Dukhovni said: >Single label names passed to getaddrinfo(3) should not result in single >label "A" or "" DNS queries. If only. See RFC 7085. I've been doing regular surveys of RRs for single label names in the decade since we published that and things haven't changed mu

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Paul Hoffman
On Jun 15, 2022, at 1:57 PM, Viktor Dukhovni wrote: > > On Wed, Jun 15, 2022 at 04:24:01PM -0400, Dave Lawrence via dns-operations > wrote: > >> I'm aware "SSAC also recommends that the use of DNS resource records >> such as A, , and MX in the apex of a TopLevel Domain (TLD) be >> contractu

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 09:09:50PM +, Paul Hoffman wrote: > > The IETF tends to be very conservative in leave lots of lattitude in its > > specifications for various potential corner cases. The caution is often > > times warranted, and yet in the same 3 decades or so nothing has changed > > t

Re: [dns-operations] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 10:03:30PM +0100, John Levine wrote: > It appears that Viktor Dukhovni said: > >Single label names passed to getaddrinfo(3) should not result in single > >label "A" or "" DNS queries. > > If only. See RFC 7085. I've been doing regular surveys of RRs for > single label

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Phillip Hallam-Baker
On Wed, Jun 15, 2022 at 5:13 PM Paul Hoffman wrote: > > What is "profoundly fragile" about A or records at any level of the > DNS hierarchy? > Well since you asked... Alice has a home with IoT devices installed in the walls. No scratch that, I have such a house. Currently roughly $10,000

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Viktor Dukhovni
On Wed, Jun 15, 2022 at 07:13:30PM -0400, Phillip Hallam-Baker wrote: > I am of course fully aware of the commercial and technical issues that make > it very difficult for the incumbents to address this problem. But that > doesn't change the fact that a system designed to meet the needs of > educa

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Mark Andrews
> On 16 Jun 2022, at 09:47, Viktor Dukhovni wrote: > > On Wed, Jun 15, 2022 at 07:13:30PM -0400, Phillip Hallam-Baker wrote: > >> I am of course fully aware of the commercial and technical issues that make >> it very difficult for the incumbents to address this problem. But that >> doesn't cha

Re: [dns-operations] [Ext] How should work name resolution on a modern system?

2022-06-15 Thread Phillip Hallam-Baker
It is my firm belief that the collapse of the crypto-ponzi world and the $45 name coins is an essential precondition for anything useful to happen in this space. It is possibly fortuitous that this appears to be underway as we speak. One reason we are where we are is that UNIX doesn't actually hav