[118588] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [mm] How is DNSSEC

daemon@ATHENA.MIT.EDU (Ben Laurie)
Wed Mar 26 13:18:00 2008

Date: Sat, 22 Mar 2008 15:52:49 +0000
From: Ben Laurie <ben@links.org>
To: bmanning@vacation.karoshi.com
CC: "James A. Donald" <jamesd@echeque.com>, 
 Perrys crypto list <cryptography@metzdowd.com>
In-Reply-To: <20080322150233.GA7440@vacation.karoshi.com.>

bmanning@vacation.karoshi.com wrote:
> On Sat, Mar 22, 2008 at 02:46:40PM +0000, Ben Laurie wrote:
>> bmanning@vacation.karoshi.com wrote:
>>> 	Er... Allow me the option o fdisbeleiving your assertion.
>>> 	PTR records can and do point to mutiple names.  Some narrow
>>> 	implementations have assumed that there will only be a single
>>> 	data element and this myth - that PTRs only point to a single
>>> 	name - is and has been spread widely.
>> You can disbelieve my assertion if you wish, but I am only quoting the 
>> RFC. RFC 1035, to be precise:
>>
>> "Address nodes are used to hold pointers to primary host names
>> in the normal domain space."
>>
>> (section 3.5. IN-ADDR.ARPA domain). So, the "myth" is in the scripture.
> 
> 
> 	ah... open to interpretation.  what is a "primary" host name?

RFC 1035 does not say, in the case of hosts, but the intent is quite 
clear from the text on gateways:

"Gateways will often have two names in separate domains, only one of 
which can be primary."

-- 
http://www.apache-ssl.org/ben.html           http://www.links.org/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post