.@ Tony Finch – blog


There has been a lengthy discussion on the DNS operations list about new GDLDs with A, AAAA, or MX records at the zone apex, which allows dotless fully-qualified hostnames and mail domains, such as dk and va. This brings back the old spectre of RFC 1535 and unpredictable name resolution.

One particular example that I care about is local unqualified mail domains. We use Exim's widen_domains feature, which (in our configuration) tries appending cam.ac.uk and ac.uk to the mail domain in turn if DNS resolution fails. This means that local mail domains such as @careers, @farm, @foundation, @law, @wiki and so forth are newly vulnerable to breakage by changes elsewhere in the DNS. This is not really a new problem (there were amusing problems with @uk.ac.cam.cl in the past) but the scale will become much larger.

So I'm wondering what to do. I could change widen_domains to work a bit more like qualify_single (except without depending on the behaviour of the resolver library), that is to try local names in preference to global ones when there are no dots in the mail domain. Or I could make a break with tradition and drop support for unqualified names - but I would have to wean a few dozen people (including myself) off the habit.

Bah.