Folks,
it's happening again.
the dnsext working group is in revision 18 of a draft that drastically and
incompatibly changes the DNS API, out from under every application that uses
DNS. they've made all kinds of efforts to avoid having LLMNR pollute DNS
caches, but done nothing to avoid polluting applications that use DNS and make
similar assumptions about DNS integrity. in fact the document explicitly
suggests overloading the existing APIs so that lookups intended for DNS will
under some conditions instead be redirected to LLMNR - even though LLMNR is
supposed to look up a completely different set of names. (though the
examples are all written in terms of FQDNs.)
furthermore it is entirely possible that some hosts on a link will have their
queries sent to DNS while others will have their queries handled by LLMNR
servers, again completely transparently to the applications, producing
inconsistent results for identical queries.
the amazing thing is that they're in revision 18 and still have these
fundamental flaws.