On 7/10/2013 11:59 AM, Russ Housley wrote:
The IAB has made a statement on dotless domains. You can find this statement
here:
http://www.iab.org/documents/correspondence-reports-documents/2013-2/iab-statement-dotless-domains-considered-harmful/
It's unfortunate that the IAB did not choose to circulate a draft before
releasing the Statement. The Statement could have been made a bit
stronger in the concern it expresses.
There's been a separate discussion on the SMTP mailing list about the
ICANN SSAC report on the topic of dotless domains.
The report correctly notes that there are also email barriers to the use
of dotless domains.
The report incorrectly attributes these to the email standards, which do
not prohibit the use. (To be fair the format standard RFC 2822, which
was in force for a number of years, did have the prohibition, but
neither its predecessor nor its successor -- the current standard
RFC5322 -- carry the limitation.)
Rather, the SMTP mailing list confirmed common software implementation
barriers, sometimes due to the DNS-related stricture.
More interesting were other concerns about possible attacks and
configuration errors. The example of localhost was cited.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net