> From: "A. Schulze" <[email protected]>

> > TSIG uses DNS names for encoding the algorithm type.
> I didn't expected that...

Beware that a very popular TSIG implementation is intermittently
confused by upper case algorithm names from a peer despite the fact
that they're encoded like domain names.  If you're writing code that
talks TSIG, I suggest doing what I finally did recently, which is
converting algorithm names to lower case as you put them on or take
them off the wire.

One might constrain local user configuration settings to lower case,
but I'd still ignore case when comparing with what comes off the wire.


Vernon Schryver    [email protected]

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to