Does BIND supports ANAME RR

Mark Andrews marka at isc.org
Mon Aug 9 21:46:17 UTC 2021


If you mean stop publishing CNAME as meaning “the server for this service is …” then yes. HTTPS can be published along side MX, A, and AAAA.  Just start doing it. 

Mark
-- 
Mark Andrews

> On 10 Aug 2021, at 07:13, Klaus Darilion <klaus.darilion at nic.at> wrote:
> 
> Do you think that we can get rid of CNAME too? 
> 
> regards
> Klaus
> 
>> -----Ursprüngliche Nachricht-----
>> Von: Ondřej Surý <ondrej at isc.org>
>> Gesendet: Montag, 9. August 2021 19:19
>> An: Klaus Darilion <klaus.darilion at nic.at>
>> Cc: Mark Andrews <marka at isc.org>; bind-users at lists.isc.org
>> Betreff: Re: Does BIND supports ANAME RR
>> 
>> No, and there’s no strong usercase for that. The ANAME was wrong on every
>> level from the protocol perspective and I am glad it is gone.
>> 
>> Ondřej
>> --
>> Ondřej Surý — ISC (He/Him)
>> 
>> My working hours and your working hours may be different. Please do not
>> feel obligated to reply outside your normal working hours.
>> 
>>> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users <bind-
>> users at lists.isc.org> wrote:
>>> 
>>> Does every application that uses gethostbyname have a benefit of
>> HTTPS/SVCB? That is what I meant.
>>> regards
>>> Klaus
>>> 
>>>> -----Ursprüngliche Nachricht-----
>>>> Von: Mark Andrews <marka at isc.org>
>>>> Gesendet: Montag, 9. August 2021 15:55
>>>> An: Klaus Darilion <klaus.darilion at nic.at>
>>>> Cc: Evan Hunt <each at isc.org>; Gaurav Kansal <gaurav.kansal at nic.in>;
>> bind-
>>>> users at lists.isc.org
>>>> Betreff: Re: Does BIND supports ANAME RR
>>>> 
>>>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>>>> authoritative server on the planet already supports HTTPS and SVCB via
>>>> unknown record format. iOS is already making HTTPS queries for every
>>>> webpage. I believe other browsers also make HTTPS queries today. Go
>> look
>>>> at your DNS traffic.
>>>> 
>>>> The MR mentioned earlier allows named and the other tools to load and
>>>> display the records in presentation format and to do the additional
>> section
>>>> processing.  None of that it required to be able to return these records.   It
>>>> just makes it easier.
>>>> 
>>>> Just about all the other DNS vendors also have code that can read and
>>>> display presentation format.
>>>> 
>>>> ANAME is dead.
>>>> --
>>>> Mark Andrews
>>>> 
>>>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users <bind-
>>>> users at lists.isc.org> wrote:
>>>>> 
>>>>> 
>>>>>> 
>>>>>> -----Ursprüngliche Nachricht-----
>>>>>> Von: bind-users <bind-users-bounces at lists.isc.org> Im Auftrag von
>> Evan
>>>>>> Hunt
>>>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>>>> An: Gaurav Kansal <gaurav.kansal at nic.in>
>>>>>> Cc: bind-users at lists.isc.org
>>>>>> Betreff: Re: Does BIND supports ANAME RR
>>>>>> 
>>>>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>>>>> I need the help in figuring out whether BIND supports ANAME ? If
>>> yes,
>>>>>>>>> then from which version on wards ?
>>>>>>>> 
>>>>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>>>>> it'll be coming back.
>>>>>>>> 
>>>>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>>>>> BIND will have support for those pretty soon.
>>>>>> 
>>>>>> But honestly SVCB will not solve the ANAME problem. I will take years
>>> until
>>>>> all resolvers/client would support SVCB whereas ANAME would be
>>>>> implemented in the authoritative name server and hence would work for
>>>>> every client/resolver as client/resolver never sees the ANAME but only the
>>>>> A/AAAA record.
>>>>>> 
>>>>>> regards
>>>>>> Klaus
>>>>>> _______________________________________________
>>>>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
>>> unsubscribe
>>>>> from this list
>>>>>> 
>>>>>> ISC funds the development of this software with paid support
>>>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>>>> information.
>>>>>> 
>>>>>> 
>>>>>> bind-users mailing list
>>>>>> bind-users at lists.isc.org
>>>>>> https://lists.isc.org/mailman/listinfo/bind-users
>>> _______________________________________________
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>> 
>>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users at lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users


More information about the bind-users mailing list