On 2011/10/22, at 15:21, Keith Moore wrote:

> 
> On Oct 22, 2011, at 2:42 PM, Doug Barton wrote:
> 
>> 1. I think we're all in agreement that dot-terminated names (e.g.,
>> example.) should not be subject to search lists. I personally don't have
>> any problems with any document mentioning that this is the expected
>> behavior.
> 
> agree.  however there are standard protocols for which a trailing dot in a 
> domain name is a syntax error.

Any protocol that makes a standard FQDN a syntax error is itself in error.  Not 
to say that these don't exist, but if people are writing protocols that can't 
deal with a properly formatted FQDN they need to stop.  Now.

> Strongly disagree.  That would leave users without a protocol-independent way 
> of unambiguously specifying "this is a fully-qualified domain name".
> 
> The practice of applying search lists to names with "."s in them needs to die.

I can't agree with this statement.  As others have said, the practice of using 
a search list to allow 'ssh foo.bar' to reach 'foo.bar.example.com' isn't going 
anywhere, and there are a lot of people that make extensive use of the 
convenience.  Ask any security professional about how easy it is to compete 
with convenient access.

I think we need to accept that this practice is here to stay, and figure out 
how to deal with it on those terms.


_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to