On Mon, Jul 20, 2026 at 02:45:24PM -0500, Ben Schwartz wrote:
Domain names in wire-format should be checked for non-compliant characters (e.g. labels containing ".", uppercase, whitespace, or non-ASCII characters) due to security risks.
I'd be pretty surprised to learn that labels containing uppercase characters have wire-format labels that are not compliant. The protocol documents explicitly say you're supposed to preserve the case but ignore it for matching purposes. A -- Andrew Sullivan [email protected] _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
