search and ndots support in bind utilities
Petr Mensik
pemensik at redhat.com
Tue Oct 1 18:29:16 UTC 2019
Thank you Paul,
this document is far better than I hoped for. I have to improve my
googling skills it seems. This is brilliant.
On 9/30/19 5:35 PM, Paul Ebersman wrote:
> pemensik> I am aware search is a no-no in DNS community. However, is
> pemensik> there any public documentation to this change? Is there RFC
> pemensik> recommending not to use search or how it should be used,
> pemensik> related to today's top level domains?
>
> pemensik> While I agree it is dangerous, there are still people using
> pemensik> it. I think we should point them at some document, explaining
> pemensik> what are possible dangers. How to use it safe way or how to
> pemensik> avoid using it at all.
>
> See ICANN SSAC doc 64:
>
> <https://www.icann.org/en/system/files/files/sac-064-en.pdf>
>
> It goes into detail on why search/suffix lists are a bad idea.
>
--
Petr Menšík
Software Engineer
Red Hat, http://www.redhat.com/
email: pemensik at redhat.com PGP: 65C6C973
More information about the bind-users
mailing list