3
4
Fork
You've already forked validns
5

Support literal . characters inside DNS labels #119

Open
opened 2026年05月14日 14:58:19 +02:00 by tobez · 0 comments
Collaborator
Copy link

Zone files where a label contains a literal . character (written as
\. in zone-file syntax) are currently rejected with:

a dot within a label is not currently supported

RFC 1035 permits this and both BIND and ldns accept such zones.

Adding support is not a small change. validns stores DNS names
internally as ASCII C strings using . as the label separator, so a
literal dot inside a label is indistinguishable from a label boundary.
Fixing this would require a different internal name representation
(e.g. wire format) along with corresponding changes to every RR type's
name handling, to NSEC / NSEC3 canonical ordering, to apex matching,
and to the zone-data store.

Split out from #34, which collects several smaller zone-parsing
issues; the remaining items there are being addressed separately.

This issue may end up closed as wontfix — literal dots in labels are
vanishingly rare in real zones and are widely discouraged. Filed so
the limitation is at least tracked explicitly.

Zone files where a label contains a literal `.` character (written as `\.` in zone-file syntax) are currently rejected with: a dot within a label is not currently supported RFC 1035 permits this and both BIND and ldns accept such zones. Adding support is not a small change. validns stores DNS names internally as ASCII C strings using `.` as the label separator, so a literal dot inside a label is indistinguishable from a label boundary. Fixing this would require a different internal name representation (e.g. wire format) along with corresponding changes to every RR type's name handling, to NSEC / NSEC3 canonical ordering, to apex matching, and to the zone-data store. Split out from #34, which collects several smaller zone-parsing issues; the remaining items there are being addressed separately. This issue may end up closed as wontfix — literal dots in labels are vanishingly rare in real zones and are widely discouraged. Filed so the limitation is at least tracked explicitly.
Sign in to join this conversation.
No Branch/Tag specified
main
v0.10.0
v0.9.0
v0.8.0
v0.7.0
v0.6.0
v0.5.0
v0.4.0
v0.3.0
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
DNS-OARC/validns#119
Reference in a new issue
DNS-OARC/validns
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?