Re: [DNSOP] abandoning ANAME and standardizing CNAME at apex

[Mark Andrews <[e-mail]>]

> On 19 Sep 2018, at 5:26 pm, Stephane Bortzmeyer <[e-mail]> wrote:
> 
> On Wed, Sep 19, 2018 at 07:24:25AM +1000,
> Mark Andrews <[e-mail]> wrote 
> a message of 38 lines which said:
> 
>> As for scripts, you upgrade the tools those scripts use:
>> curl(libcurl), wget, fetch for SH. File::Fetch for perl.  Similar
>> for the other scripting languages. Very few applications actually
>> make socket calls directly for http.
> 
> I hope it is true but I'm not so sure. Any hard data somewhere? My
> purely anecdotal evidence is that I've seen "applications actually
> make socket calls directly for http", one reason probably being it is
> widely teached in schools.

And the number of such applications that connect to names that are served by
CDN and are also at zone apexes such that CNAME doesn’t work is ~0%.  Such
applications need to be upgraded.

I’m sure CDN’s could give Agent string counts for sites where they are
doing DNS hacks for apex names so we could see actual data.  It will be in
their logs.  I’m sure there are employees of such companies reading this.

> HTTP/2 is a good thing here since it is much harder to do it yourself,
> so people will rely on libraries :-)

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: [phone]              INTERNET: [e-mail]