<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br><div><br><blockquote type="cite"><div>On 20 Jun 2024, at 15:29, Michael Richardson <mcr@sandelman.ca> wrote:</div><br class="Apple-interchange-newline"><div><div><br>Mark Andrews <marka@isc.org> wrote:<br><blockquote type="cite">Named and nsupdate validate input for types they know about (both text<br>and wire). You would have to use versions that are not HTTPS aware and<br>use unknown type format.<br></blockquote><br>So, he could code it in Perl or Python or something which had a dynamic DNS<br>library. Bind itself wouldn't validate the "ascii-hex" part when it receives<br>it.<br></div></div></blockquote><br></div><div>Named will reject HTTPS records that it can determine are invalid. This includes</div><div>in UPDATE requests. The server will return FORMERR to the dynamic update client.</div><div><br></div><div>See lib/dns/rdata/in_1/svcb_64.c for all the checks performed.</div><br><div>
-- <br>Mark Andrews, ISC<br>1 Seymour St., Dundas Valley, NSW 2117, Australia<br>PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
</div>
<br></body></html>