[dns-operations] [Ext] Signing on the fly and UltraDNS

[John Levine]

In article <A1D7D7AF-55B7-48C5-94E4-8BB77D5E9183 at isc.org> you write:
>dig by default is not built with IDN support.  If you request IDN support at build time
>+[no]idnin and +[no]idnout are enabled which then expect valid IDN names on the command
>line for +idnin and in the output for +idnout.

That can't be right.  I can use dig for underscored names which aren't IDNs either and it doesn't complain.

If it's validating IDNs it makes sense to complain about something
like xn--1234 which has an IDN prefix but isn't an A-label. But a
label that is just a hyphen isn't a hostname just like _foo isn't a
hostname.  Why does it complain about one but not the other?