Re: [DNSOP] A draft about the Name:Wreck problem draft-dashevskyi-dnsrr-antipatterns

Christian Huitema <huitema@huitema.net> Thu, 15 April 2021 07:13 UTC

To: Mark Andrews <marka@isc.org>, Tony Finch <dot@dotat.at>
Cc: dnsop@ietf.org, John Levine <johnl@taugh.com>
References: <20210414133641.A18B572E0509@ary.qy> <59df7967-2fef-371a-4d34-4c8efec74ca0@dotat.at> <628E22EC-3395-45AB-9FD8-2405A92682BA@isc.org>
From: Christian Huitema <huitema@huitema.net>
Message-ID: <49f57263-c68c-eb2a-a7b7-7b3028dacbc8@huitema.net>
Date: Thu, 15 Apr 2021 09:12:57 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.9.1
MIME-Version: 1.0
In-Reply-To: <628E22EC-3395-45AB-9FD8-2405A92682BA@isc.org>
Content-Type: multipart/alternative; boundary="------------91F174D7338B3CA3E64FA2E6"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/ufEKkmGEJpLwmgptyC0rhi0y6no>
Subject: Re: [DNSOP] A draft about the Name:Wreck problem draft-dashevskyi-dnsrr-antipatterns
Precedence: list

On 4/14/2021 11:19 PM, Mark Andrews wrote:
>> On 15 Apr 2021, at 07:17, Tony Finch<dot@dotat.at>  wrote:
>>
>> John Levine<johnl@taugh.com>  wrote:
>>> On the other hand, all of the sloppy coding people use to handle
>>> compressed names is embarassing.
>> I don't think it's entirely fair to blame the coders who make these
>> mistakes, because a very large number of excellent programmers have made a
>> mess of DNS name decompression. When I find out about new DNS code the
>> first thing I do is look at the name parser to see if it successfully
>> avoids these traps and pitfalls, because it's a good indication that the
>> programmer has learned from their own or others' mistakes, or has much
>> greater than average ability to write attack-resistant parsers.
>>
>> It seems worthwhile to try to help future coders not to mess it up.
>>
>> Tony.
>> -- 
>> f.anthony.n.finch<dot@dotat.at>   https://dotat.at/
>> Gibraltar Point to North Foreland: Northerly or northeasterly 3 to 5.
>> Smooth or slight becoming slight or moderate. Showers. Good.
> Adding test vectors would help, especially broken vectors.

+1. That would be a pretty good way for the IETF to help clean the mess. 
That, and maybe a DNS site that would serve the test vectors.

-- Christian Huitema

[DNSOP] A draft about the Name:Wreck problem draf… Stephane Bortzmeyer
Re: [DNSOP] A draft about the Name:Wreck problem … Stephane Bortzmeyer
Re: [DNSOP] A draft about the Name:Wreck problem … Stephane Bortzmeyer
Re: [DNSOP] A draft about the Name:Wreck problem … John Levine
Re: [DNSOP] A draft about the Name:Wreck problem … Loganaden Velvindron
Re: [DNSOP] A draft about the Name:Wreck problem … Tony Finch
Re: [DNSOP] A draft about the Name:Wreck problem … Mark Andrews
Re: [DNSOP] A draft about the Name:Wreck problem … Christian Huitema
Re: [DNSOP] A draft about the Name:Wreck problem … Paul Vixie
Re: [DNSOP] A draft about the Name:Wreck problem … Mark Andrews
Re: [DNSOP] broken compressed names, was A draft … John R Levine
Re: [DNSOP] broken compressed names, was A draft … Wellington, Brian
Re: [DNSOP] broken compressed names, was A draft … Christian Huitema
Re: [DNSOP] A draft about the Name:Wreck problem … Paul Vixie
Re: [DNSOP] A draft about the Name:Wreck problem … Mark Andrews
Re: [DNSOP] A draft about the Name:Wreck problem … Ray Bellis
Re: [DNSOP] A draft about the Name:Wreck problem … Ray Bellis
Re: [DNSOP] A draft about the Name:Wreck problem … Tony Finch
Re: [DNSOP] A draft about the Name:Wreck problem … Lanlan Pan
Re: [DNSOP] A draft about the Name:Wreck problem … Ray Bellis