6 Dub
2016
6 Dub
'16
23:06
Hi,
On Wed, Apr 06, 2016 at 09:43:54PM +0200, Ond??ej Surý wrote:
On the contrary, it's important to preserve the
case of the QNAME from the DNS query in the DNS response and not the case in the zone. At
least it helps the modern resolvers to establish additional defenses against DNS poisoning
attacks.
E.g. your BIND installation is either too old or misconfigured and doesn't honor 0x20
bit, see the ISC presentation on the topic:
https://indico.dns-oarc.net/event/20/session/2/contribution/12/material/sli…
$ dig @ns3.dns.space.net SpAce.NEt soa
TBH, I don't really care about the QNAME in the response. This is protocol
stuff which people don't *see*, unless they are actually looking for it.
I care about the *answer*:
;; ANSWER SECTION:
space.net. 14400 IN SOA ns.Space.Net. hostmaster.Space.Net. 2016040611 28800 3600 864000
1800
^^^^^^^^^^^^ this!
the QNAME I already know...
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279