ietf
[Top] [All Lists]

RE: [Fwd: [Asrg] Verisign: All Your ...

2003-09-23 19:25:02
Dean wrote:
The fact still remains that DNS entries do not necessarilly imply
registration, and that the DNS protocol cannot be used to make registry
queries.

This is getting so far from the topic it's not funny.

Do any of the systems broken by Verisign try and do REGISTRY queries through
DNS? No. So how is this relevant AT ALL to what Verisign have done?

You also keep saying how Verisign are operating completely within the DNS
protocol. Yes, they are.
But so are programs that use DNS lookup to determine the existence of the
domain! (not its registered status - that is IRRELEVANT to a user program,
hadn't you noticed?)
The protocol specifies NXDOMAIN for this very reason.
This (obviously enough) can lead to conflicts - this is where external
guidelines come in to ensure compatibility.
Now, in this case there were none. So the IAB came up with some: don't play
with wildcards!

--James


Disclaimer: Whilst every attempt has been made to ensure that material
contained in this email is free from computer viruses or other defects, the
attached files are provided, and may only be used, on the basis that the
user assumes all par responsibility for the use of the material transmitted.
The email is intended only for the use of the individual or entity named
above and may contain information, distribution or copying that is
confidential and privileged. If you are not the intended recipient please
note that any dissemination, distribution or copying of this email is
strictly prohibited. If you have received this email in error, please notify
us immediately by return email and destroy the original message.