Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

[james woodyatt <[e-mail]>]

On Dec 15, 2016, at 06:35, Ted Lemon <[e-mail]> wrote:
> [Mark Andrews <[e-mail]> wrote:]
> Why shouldn't a iterative resolver work if we can make it work?
> 
> Putting an iterative resolver in a stub resolver is an attack on the DNS infrastructure.   If you are doing it because you are testing some theory in an experimental jig, that's perfectly fine; in that case, you are a consenting adult, and can configure it with a special delegation for .homenet if you need that to work.   If you are adding it to production code that will be installed in a billion devices, you are a vandal. 

I doubt any sane home gateway vendor would do this even if the DNS infrastructure were robust enough to handle it (which, hey— I thought it was supposed to be, why isn’t it?). The reason is that too many ISPs insist on enhancing the content of the public DNS with their own private horizon stuff, so that additional services they bundle to their customers will work only on their own networks. Competition! Oh and that’s before I mention the extra featurefulness that many content delivery networks are still using for selecting servers based on the source address of the iterative DNS query instead of something more meaningful.


--james woodyatt <[e-mail] <mailto:[e-mail]>>