Re: RFC 4408 Errata - PermError on invalid domains after macro expansion

On 24 October 2011 23:25, Commerco WebMaster wrote:

> It appears to (rightly) push the issue of any
> DNS specific syntactically invalid elements
> introduced by a publisher / domain holder within
> their zone file back to the relevant DNS related
> RFC.

Makes sense, but IIRC there were two problems with
this approach:  The reference implementation used
"no match" instead of PermError, i.e., there could
be a test case in the test suite that has to be
updated.  Well, that's the main purpose of 4408bis,
get rid of the errata, ideally without introducing
new errors.

And it is not necessarily the fault of the policy.
As soon as the publisher tries to use local part
macros an attacker could try "interesting" local
parts such as "a..b"@example   Is there any chance
to deprecate local part macros in 4408bis as known
trouble-makers?

-Frank