On Mon, 25 Jun 2018, Dave Crocker wrote:
I'm feeling lazy. Care to suggest text to add and its location in -attrleaf, John?

See below.

Regards,
John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly

      <section title="Security Considerations">
         <t>This memo raises no new security issues.</t>
         <section title="Interaction with DNS wildcards">
           <t>DNS wildcards interact poorly with _underscore names in two ways.
            Since wildcards only are interpreted as leaf names, one cannot 
create
            the equivalent of a wildcard name for prefixed names.
            A name such as_label.*.example.com is not a wildcard.
           </t><t>Conversely, a wildcard such as *.example.com can match any 
name
            including an _underscore name.  Any RRs at a wildcard name that are 
used with _underscore names,
            such as TXT, the RRs could be misinterpreted as _underscore'd data.
           </t>
         </section>
      </section>

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to