On Feb 18, 2008, at 6:38 AM, Guy Helmer wrote:

Xin LI wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

M. Warner Losh wrote:
I don't think it would be the end of world if we allow _ in host names.
All other (lame) OSes allows it, their resolver just accepts this
character and give the answer, actually, I would be very surprised if it
can still cause any real world attack nowadays.

Are we talking about hostnames specifically, or domain name components in general?

I've been recently looking at DomainKeys, and underscores appear to be typically used in the domain components for domain keys TXT records (example below from http://www.elandsys.com/resources/sendmail/domainkeys.html) :
mail._domainkey.example.com. IN TXT "k=rsa; t=y;
p=MEwwPQRJKoZIhvcNADAQCQADOwAwOAIxANPpYHdE2tevfEpvL1Tk2dDYv0pF28/ f5MxU83x/0b
          sn4R4p7waPaz1IbOGs/6bm5QIDAQAB"

Other systems, including mDNS and zeroconf, rely on underscores in domain components as well. Underscores in domain names are a de jure standard, in the hostname a de facto standard.

--
           Where am I, and what am I doing in this handbasket?
Wes Peters                                                     [EMAIL PROTECTED]


_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to