[dns-operations] [Ext] Signing on the fly and UltraDNS

[Evan Hunt]

On Tue, Jan 05, 2021 at 04:52:07AM +0000, Paul Hoffman wrote:
> That all seems correct. However, I brought the issue to this mailing
> list, instead of to the UltraDNS folks, because I am using tools that
> expect host names instead of domain names (in this case, dig)

Note: hostname vs. domain name isn't the problem here; the problem is dig
is trying to interpret them as internationalized domain names and the
IDN conversion threw an error on "-.house.gov". (I guess hyphens are a
particular problem since libidn2 has a specific error code for that -
IDN2_HYPHEN_STARTEND. I don't recall all the IDN syntax rules offhand.)

I wonder aloud if dig's default behavior should be to try IDN and
silently fall back to conventional output formatting if it fails.
I imagine there are situations where you'd want the rules strictly
enforced, but I'm not sure if there was a good reason to do that by
default.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.