As of these, only HTTPS and SVCB are in widespread use.

--
Ondřej Surý <ond...@sury.org> (He/Him)

> On 1. 5. 2022, at 14:39, Michael Tokarev <m...@tls.msk.ru> wrote:
> 
> Control: tag -1 + moreinfo
> 
> 01.05.2022 14:59, John Shaft wrote:
>> Package: ldnsutils
>> Version: 1.8.1-1
>> Severity: wishlist
>> Dear Maintainer,
>> ldns 1.8.0 introduced support for SVCB & HTTPS resource records [1],[2]
>> It has to be compiled via a specific parameter --enable-rrtype-svcb-https
>> Could the debian package be shipped with this option enabled ?
> 
> From ldns's ./configure --help:
> 
>  --enable-rrtype-ninfo   Enable draft RR type ninfo.
>  --enable-rrtype-rkey    Enable draft RR type rkey.
>  --disable-rrtype-openpgpkey
>                          Disable openpgpkey RR type.
>  --enable-rrtype-ta      Enable draft RR type ta.
>  --enable-rrtype-avc     Enable draft RR type avc.
>  --enable-rrtype-doa     Enable draft RR type DOA.
>  --enable-rrtype-amtrelay
>                          Enable draft RR type AMTRELAY.
>  --enable-rrtype-svcb-https
>                          Enable draft RR types SVCB and HTTPS.
> 
> Neither of these is enabled.
> 
> I wonder if we should enable them all.
> 
> I don't see any special dependencies for these, it just
> an ifdef in rr.c:
> 
> #ifdef RRTYPE_SVCB_HTTPS
> static const ldns_rdf_type type_svcb_wireformat[] = {
>        LDNS_RDF_TYPE_INT16,
>        LDNS_RDF_TYPE_DNAME,
>        LDNS_RDF_TYPE_SVCPARAMS
> };
> #endif
> 
> #ifdef RRTYPE_SVCB_HTTPS
>        /* 64 */
>        {LDNS_RR_TYPE_SVCB, "SVCB", 2, 3, type_svcb_wireformat, 
> LDNS_RDF_TYPE_NONE, LDNS_RR_NO_COMPRESS, 0 },
>        /* 65 */
>        {LDNS_RR_TYPE_HTTPS, "HTTPS", 2, 3, type_svcb_wireformat, 
> LDNS_RDF_TYPE_NONE, LDNS_RR_NO_COMPRESS, 0 },
> 
> #else
> {LDNS_RR_TYPE_NULL, "TYPE64", 1, 1, type_0_wireformat, LDNS_RDF_TYPE_NONE, 
> LDNS_RR_NO_COMPRESS, 0 },
> {LDNS_RR_TYPE_NULL, "TYPE65", 1, 1, type_0_wireformat, LDNS_RDF_TYPE_NONE, 
> LDNS_RR_NO_COMPRESS, 0 },
> #endif
> 
> I wonder why they didn't enable them.  If the reason is that these
> are DRAFTs, - maybe it's okay to use DRAFT-HTTPS instead of HTTPS there?
> 
> Ondřej, do you have any comments about these?
> 
> Thanks,
> 
> /mjt
> 

Reply via email to