Kerberos transport DNS record design

Simo Sorce simo at
Fri May 27 14:59:59 EDT 2016

On Thu, 2016-05-26 at 16:45 -0400, Nathaniel McCallum wrote:
> Thus, I propose the following:
> 1. Implement all the record names that MIT already supports as TXT.
> Using exactly the same semantics that MIT already implements (i.e.
> ignoring the weight parameter).
> 2. Make the format of the TXT record:
>     priority:weight:udp:host[:port]
>     priority:weight:tcp:host[:port]
>     priority:weight:tls:host[:port]
>     priority:weight:kkdcp:http://host[:port][/path]
>     priority:weight:kkdcp:https://host[:port][/path]
> This is isomorphic with the URI record with the exception of a missing
> scheme, which could be added later should the desire to use URI
> emerge.
> It also avoids the problem of defining a URI scheme now. I think we
> can
> get away with this by noting that this format isn't technically a URI
> even though it closely resembles one.
> Thoughts?

I like this proposal.

Simo Sorce * Red Hat, Inc * New York

More information about the krbdev mailing list