[dns-operations] HTTPS record support

Florian Weimer fweimer at redhat.com
Tue Sep 9 15:52:18 UTC 2025


* Viktor Dukhovni:

> On Tue, Sep 09, 2025 at 12:26:44PM +0200, Florian Weimer via dns-operations wrote:
>
>> From: Florian Weimer <fweimer at redhat.com>
>> Date: Tue, 09 Sep 2025 12:26:44 +0200
>> Subject: HTTPS record support
>> To: dns-operations at dns-oarc.net
>> 
>> I've got an RFE to add HTTPS/SVCB support to glibc's getaddrinfo
>> implementation.
>
> Why?  It seems an unnatural layer violation.  The IP addressses of a DNS
> name are NOT provided by its HTTPS or SVCB records.  IP address lookups
> make sense only *after* a higher layer application API that understands
> whether or not and which of either SVCB or HTTPS records may be
> relevant, processes those records and determines which target IP
> addresses and ports it wants to connect to, and over what transports.

The getaddrinfo specification and its refinements that make it clear
that this interface is not just there to get the raw address information
out of DNS, but also to perform address sorting based on various
factors, including network topology information.  It's not much of a
stretch to include address priority information from DNS as well.

I'm not saying that we should go down this path, I'm just trying to
explain why I didn't want to close the RFE immediately.

Thanks,
Florian



More information about the dns-operations mailing list