[Unbound-users] [Q] HINFO in signed zone results SERVFAIL, but NOERROR with BIND

Rick van Rein rick at openfortress.nl
Tue Jan 6 13:14:28 UTC 2009


Hi Wouter,

> Unbound lowercases all text in the rdata of HINFO records before
> verification.  Because that is what I believe RFC4034 6.2(3) means.

Isn't this one of those places where you can be liberal in what you accept?
That is, trying multiple cases (wire format and lowercase, to be precise)
while validating the signature?

I mean, there's hardly a security concern in the upper/lowercase distinction.

-Rick



More information about the Unbound-users mailing list