Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <3de5641469dc26e02c2fbb9cccaee3419d364973@linux.dev>
Date: Tue, 25 Jun 2024 01:57:36 +0000
From: "Lance Yang" <lance.yang@...ux.dev>
To: "Rich Felker" <dalias@...c.org>
Cc: "Thorsten Glaser" <tg@...bsd.de>, musl@...ts.openwall.com, "Jan Mercl"
 <0xjnml@...il.com>, "Lance Yang" <ioworker0@...il.com>
Subject: Re: [PATCH 1/1] improve DNS resolution logic for parallel
 queries

June 24, 2024 at 10:57 PM, "Rich Felker" <dalias@...c.org> wrote:



> 
> On Mon, Jun 24, 2024 at 11:56:01AM +0000, Lance Yang wrote:
> 
> > 
> > June 24, 2024 at 2:52 AM, "Thorsten Glaser" <tg@...bsd.de> wrote:
> > 
> >  
> > 
> >  Lance Yang dixit:
> > 
> >  
> > 
> >  > 
> > 
> >  > I understand your concern that continuing the search after receiving an
> > 
> >  > 
> > 
> >  > NXDOMAIN response might pose a security risk. Will look into this issue
> > 
> >  > 
> > 
> >  
> > 
> >  It’s not (just) a security risk, it’s how DNS works.
> > 
> >  
> > 
> >  NXDOMAIN means “I am a nameserver responsible for resolving your
> > 
> >  
> > 
> >  query, and I can state with confidence that the entry you requested
> > 
> >  
> > 
> >  does not exist” so no other responsible nameserver’s response can
> > 
> >  
> > 
> >  rightly differ.
> > 
> >  
> > 
> >  Sorry to bother you again. Could you please let me know from which
> > 
> >  document or standard this description is taken?
> > 
> >  
> > 
> >  Any details about the specific RFC, technical documentation, or other
> > 
> >  authoritative sources would be greatly appreciated.
> > 
> 
> RFC 2308 is the main source I can think of for clarifying the meaning
> 
> and expected behavior for NxDomain. The only relevant amendments I can
> 
> find are RFC 8020 and 9520, but neither of them change anything
> 
> related to the basic meaning.

Thanks a lot for taking time to reply!

I will refer to these documents for a deeper understanding of the
NxDomain behavior ;)

Have a good one,
Lance



> 
> Rich
>

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.