Kerberos transport DNS record design

Simo Sorce simo at redhat.com
Fri May 27 14:59:59 EDT 2016


On Thu, 2016-05-26 at 16:45 -0400, Nathaniel McCallum wrote:
> Thus, I propose the following:
> 
> 1. Implement all the record names that MIT already supports as TXT.
> Using exactly the same semantics that MIT already implements (i.e.
> ignoring the weight parameter).
> 
> 2. Make the format of the TXT record:
> 
>     priority:weight:udp:host[:port]
>     priority:weight:tcp:host[:port]
>     priority:weight:tls:host[:port]
>     priority:weight:kkdcp:http://host[:port][/path]
>     priority:weight:kkdcp:https://host[:port][/path]
> 
> This is isomorphic with the URI record with the exception of a missing
> scheme, which could be added later should the desire to use URI
> emerge.
> It also avoids the problem of defining a URI scheme now. I think we
> can
> get away with this by noting that this format isn't technically a URI
> even though it closely resembles one.
> 
> Thoughts?


I like this proposal.
Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the krbdev mailing list