[dns-operations] Cloudflare people here ? Problematic records served from a Cloudflare hosted zone.

Joe Abley jabley at strandkip.nl
Fri Nov 21 12:01:16 UTC 2025


Hi Winfried,

On 21 Nov 2025, at 12:46, Winfried via dns-operations <dns-operations at dns-oarc.net> wrote:

> <mime-attachment>

Honestly, who ever thought this was a user experience worth releasing? <old man shakes fist at sky> Anyway, where were we, oh yes

> Please keep us informed if this case could cause problems for other resolver operators as well or is otherwise relevant to them.

>From first glance this looks like the result of an interaction between Cloudflare's address synthesis for names attached to HTTP targets on Cloudflare's CDN, DNS wildcards and CNAME flattening. Whether or not what we are doing is sensible or unnecessarily surprising requires more eyes than mine. We can report back if there is interest (or if we think there is any widespread surprise people should know about).

Thanks again, Emmanuel, for bringing it up.


Joe


More information about the dns-operations mailing list