bugtraq - RE: What software breaks because of this DNS feature?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: 14 Oct 2003 13:17:37 -0500
From: "Rob Mayoff" <mayoff@....com>
To: "BUGTRAQ@...URITYFOCUS. COM" <BUGTRAQ@...urityfocus.com>
Subject: RE: What software breaks because of this DNS feature?

+---------- On Oct 14, Michael Wojcik said:
| As I read the grammar given by RFC 1034 (Domain Names) in 3.5,

The grammar specifies only the "preferred name syntax".  Section 3.1
clearly allows dot-terminated names:

    When a user needs to type a domain name, the length of each label is
    omitted and the labels are separated by dots (".").  Since a complete
    domain name ends with the root label, this leads to a printed form which
    ends in a dot.  We use this property to distinguish between:

       - a character string which represents a complete domain name
	 (often called "absolute").  For example, "poneria.ISI.EDU."