Re: [idn] impacted systems investigation

["Allen Smith" <easmith@beatrice.rutgers.edu>]

On Mar 12,  3:54am, D. J. Bernstein wrote:
> Mark Andrews, from the BIND company, writes:
> > UTF8 does not require a server upgrade
> 
> Right. But Patrik and Paul claim the opposite. This claim is, in fact,
> the centerpiece of the IDNA ``design philosophy.''
> 
> > gethostbyname() and gethostbyaddr() are clients of the DNS
> > and as such are not covered by RFC 2181.
> 
> RFC 2181 says that character-set restrictions are forbidden in all
> ``implementations of the DNS protocols.'' It doesn't matter whether the
> implementations are clients, caches, or servers.

Umm... "Clients of the DNS can impose whatever restrictions are
appropriate to their circumstances on the values they use as keys for
DNS lookup requests, and on the values returned by the DNS". Moreover, 
RFC 2181 specifically states that it is not considering security; I
therefore would argue that if one is to be concerned with security, if 
there is a contradition between RFC 2181 and security concerns,
security concerns override.

	-Allen

-- 
Allen Smith				easmith@beatrice.rutgers.edu