[dns-operations] Looping wildcard CNAMEs can be an obstacle for DANE, (googledomains.com-hosted example)
Florian Weimer
fweimer at redhat.com
Mon May 7 15:43:27 UTC 2018
On 05/07/2018 04:41 PM, John Levine wrote:
> It has the same odd broken CNAME:
>
> ;; ANSWER SECTION:
> *.christianfreear.com. 3596 IN CNAME \@.christianfreear.com.
>
> Seems to me a more interesting question is why people are putting that
> particular broken CNAME into their DNS.
It's probably the result of a DNS zone file parser which does not
implement the RFC 1035 syntax (where @ denotes “the current origin”).
Thanks,
Florian
More information about the dns-operations
mailing list