[dns-operations] Akamai now works with ENT (Empty Non-Terminals)?

Shumon Huque shuque at gmail.com
Wed Apr 17 20:19:09 UTC 2019


On Wed, Apr 17, 2019 at 2:36 PM Dave Lawrence <tale at dd.org> wrote:

> Shumon Huque writes:
> >         ;*.h4ha.net.            IN A
> >         *.h4ha.net.             RRSIG   A 13 2 [...]
> >         *.h4ha.net.             A       192.155.81.104
> >
> > Interesting problem. So the wildcard can be queried directly and
> validates
> > properly.
>
> There's a subtle bit of terminology massaging that is probably
> required here.  It's not quite the case that the wildcard is being
> queried directly, but rather that the * label in the query is hitting
> the wildcard expansion and is then replaced by a * label and thus
> returning something that looks like the wildcard name but isn't
> really.  At least that's what's going on in the sense of the DNS
> standards;
>

Yeah, I know! That was my shorthand for your paragraph :-)

I should have just said the "star label" can be matched! But I guess
I should expect no less than this level of DNS protocol geekery
on this list! :-)

Shumon.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190417/5733e75d/attachment.html>


More information about the dns-operations mailing list