Does BIND supports ANAME RR

Mark Andrews marka at isc.org
Tue Aug 10 05:26:29 UTC 2021


Please, don’t reply to threads with unrelated subject matter.  This is
just good mailing list etiquette.

Please create a new message, not a reply, and ask the question again.

Mark

> On 10 Aug 2021, at 13:48, Divya <divya.p at nic.in> wrote:
> 
> Dear Admin,
> 
> Has anybody used advance features of bind DoT and DoH, Kindly help me to configure DoT and DoH in DNS with bind BIND 9.17.16+CentOS  7.9.
> 
> With Regards 
> Divya 
> 
> ----- Original Message -----
> From: "Ondřej Surý" <ondrej at isc.org>
> To: "klaus darilion" <klaus.darilion at nic.at>
> Cc: bind-users at lists.isc.org
> Sent: Monday, August 9, 2021 10:48:54 PM
> Subject: Re: Does BIND supports ANAME RR
> 
> No, and there’s no strong usercase for that. The ANAME was wrong on every level from the protocol perspective and I am glad it is gone.
> 
> Ondřej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> 
>> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users <bind-users at lists.isc.org> wrote:
>> 
>> Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? That is what I meant.
>> regards
>> Klaus
>> 
>>> -----Ursprüngliche Nachricht-----
>>> Von: Mark Andrews <marka at isc.org>
>>> Gesendet: Montag, 9. August 2021 15:55
>>> An: Klaus Darilion <klaus.darilion at nic.at>
>>> Cc: Evan Hunt <each at isc.org>; Gaurav Kansal <gaurav.kansal at nic.in>; bind-
>>> users at lists.isc.org
>>> Betreff: Re: Does BIND supports ANAME RR
>>> 
>>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>>> authoritative server on the planet already supports HTTPS and SVCB via
>>> unknown record format. iOS is already making HTTPS queries for every
>>> webpage. I believe other browsers also make HTTPS queries today. Go look
>>> at your DNS traffic.
>>> 
>>> The MR mentioned earlier allows named and the other tools to load and
>>> display the records in presentation format and to do the additional section
>>> processing.  None of that it required to be able to return these records.   It
>>> just makes it easier.
>>> 
>>> Just about all the other DNS vendors also have code that can read and
>>> display presentation format.
>>> 
>>> ANAME is dead.
>>> --
>>> Mark Andrews
>>> 
>>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users <bind-
>>> users at lists.isc.org> wrote:
>>>> 
>>>> 
>>>>> 
>>>>> -----Ursprüngliche Nachricht-----
>>>>> Von: bind-users <bind-users-bounces at lists.isc.org> Im Auftrag von Evan
>>>>> Hunt
>>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>>> An: Gaurav Kansal <gaurav.kansal at nic.in>
>>>>> Cc: bind-users at lists.isc.org
>>>>> Betreff: Re: Does BIND supports ANAME RR
>>>>> 
>>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes,
>>>>>>> then from which version on wards ?
>>>>>> 
>>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>>> it'll be coming back.
>>>>>> 
>>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>>> BIND will have support for those pretty soon.
>>>> 
>>>> But honestly SVCB will not solve the ANAME problem. I will take years until
>>> all resolvers/client would support SVCB whereas ANAME would be
>>> implemented in the authoritative name server and hence would work for
>>> every client/resolver as client/resolver never sees the ANAME but only the
>>> A/AAAA record.
>>>> 
>>>> regards
>>>> Klaus
>>>> _______________________________________________
>>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>>> from this list
>>>> 
>>>> ISC funds the development of this software with paid support
>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>> information.
>>>> 
>>>> 
>>>> bind-users mailing list
>>>> bind-users at lists.isc.org
>>>> https://lists.isc.org/mailman/listinfo/bind-users
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>> 
>> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list