<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>There are several 'special-use' domain names I'm pondering</p>
<ul>
<li>invalid.</li>
<li>test.</li>
<li>onion.</li>
</ul>
<p>My read of the RFCs indicate they should result in NXDOMAIN, and
not be passed for resolution.<br>
</p>
<p>RFC 6761 (test. Section 6.2.4 / invalid. Section 6.4.4)</p>
<p> </p>
<blockquote type="cite">caching DNS servers SHOULD, by default,
generate immediate negative responses for all such queries.</blockquote>
<p>RFC 7686 (onion. Section 2.4)</p>
<p> </p>
<blockquote type="cite">where not explicitly adapted to interoperate
with Tor, SHOULD NOT attempt to look up records for .onion names.
They MUST generate NXDOMAIN for all such queries.</blockquote>
<p>Is there some reason these should not just be hammered into our
RPZ ?<br>
</p>
<p><br>
</p>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
--
Do things because you should, not just because you can.
John Thurston 907-465-8591
<a class="moz-txt-link-abbreviated moz-txt-link-freetext" href="mailto:John.Thurston@alaska.gov">John.Thurston@alaska.gov</a>
Department of Administration
State of Alaska</pre>
</body>
</html>