Re: [PATCH] Allow to specify a domain for a cookie

From: Willy Tarreau <w#1wt.eu>
Date: Sun, 25 May 2008 23:05:56 +0200


Hi Patrick,

On Sun, May 25, 2008 at 10:59:55PM +0200, Patrick Viet wrote:
> On Sun, May 25, 2008 at 10:18 AM, Willy Tarreau <w#1wt.eu> wrote:
>
> >> The underscore ("_") character is not RFC-valid but as it is
> >> often (mis)used so I decided to allow it.
> >
> > OK for this too. Have you found situations where people try to use these
> > chars, since they cannot put them in DNS records ? Maybe when they map
> > windows server names into /etc/hosts ?
>
> This is incorrect actually. Even though this is a very widespread
> belief, it's none the less a myth that the underscore cannot exist in
> DNS.
> (examples in RFC 2782 - co-written by the original BIND writer Paul Vixie)
> The underscore can be used for symbolic names such as in the
> domainkeys technology ; just not for actually host names.
> So yes it can definitely be put in a DNS record
> (try dig _domainkey.google.com, _domainkey.ebay.com,
> _domainkey.sendmail.com and so on)

I was not aware of this. There are interesting examples in the RFC, thanks for spotting this !

> Nice patch by the way.
> Expiration is probably a good idea.

Probably we can start with a configurable Expires field, and only later try to mimic other server headers.

Regards,
Willy Received on 2008/05/25 23:05

This archive was generated by hypermail 2.2.0 : 2008/05/25 23:15 CEST