Maintained by: NLnet Labs

[Unbound-users] [Q] HINFO in signed zone results SERVFAIL, but NOERROR with BIND

Rick van Rein
Tue Jan 6 14:14:28 CET 2009


Hi Wouter,

> Unbound lowercases all text in the rdata of HINFO records before
> verification.  Because that is what I believe RFC4034 6.2(3) means.

Isn't this one of those places where you can be liberal in what you accept?
That is, trying multiple cases (wire format and lowercase, to be precise)
while validating the signature?

I mean, there's hardly a security concern in the upper/lowercase distinction.

-Rick