je découvre le truc et je vois pas l'info, mais est-ce qu'il est possible d'utiliser #svcb pour par exemple permettre à un client openvpn de se connecter automatiquement à un lien de secours si le lien principal ne répond pas ?

Ca pourrait marcher ou je capte pas le truc ?

@cks @lanodan

Missing from @drscriptt 's list are AAAA, HTTPS, and SVCB records.

AAAA has plenty of obvious choices.

You'll know the . convention for SRV, SVCB, and MX resource record sets, of course.

I shall just drop in my personal experience from earlier this year that an accidentally supplied HTTPS resource record can *definitely* break WWW traffic; because browsers in practice do not obey RFC9460 §2.4.2.

#djbdns
#DomainNameSystem
#SplitHorizon
#ReservedSuperDomains #DNS #HTTPS #SVCB

🌘 RFC 9460 - 透過 DNS 指定服務綁定與參數 (SVCB 和 HTTPS 資源紀錄)
➤ DNS 升級：SVCB 和 HTTPS 紀錄如何簡化服務連線與參數指定
✤ https://datatracker.ietf.org/doc/html/rfc9460
這份 RFC 文件介紹了新的 DNS 資源紀錄類型 SVCB 和 HTTPS，旨在提供更詳盡的服務連線資訊。SVCB 紀錄允許服務透過多個替代終端點提供，並附帶傳輸協定配置等參數，且具備擴展性以支援未來用途（如 TLS ClientHello 加密金鑰）。此外，SVCB 也克服了 CNAME 紀錄在根網域別名設定上的限制。HTTPS 紀錄則是 SVCB 針對 HTTP 協議的特化版本。透過在連線建立前提供更多資訊，這些新紀錄能提升效能並加強隱私保護。
+ 這個更新聽起來非常棒，希望能加速 HTTP/3 和 ECH 的普及。
+ 很高興看到 DNS 紀錄能提供更多彈性，特別是對於根網域的別名設定。
#DNS #RFC #SVCB #HTTPS #網路協議 #服務綁定

🚨 BREAKING: #RFC9460 claims to revolutionize the #DNS landscape with #SVCB and #HTTPS records, but spoiler alert—it's just another jargon-filled proposal destined to collect digital dust. 🌐📜 Meanwhile, DNS admins everywhere are thrilled to have more acronyms to ignore. 🙄✨
https://datatracker.ietf.org/doc/html/rfc9460 #DigitalDust #DNSAdmins #HackerNews #ngated

RFC9460: SVCB and HTTPS DNS Records

https://datatracker.ietf.org/doc/html/rfc9460

#HackerNews #RFC9460 #SVCB #HTTPS #DNS #Records #IETF #TechNews #Networking

@ermo

There are a much smaller number of people doing SVCB lookups, too. But, interestingly, they are doing them wrongly.

And with a direct correlation to some other abuses.

Which does make me think that, in an ironic twist, it is the bad actors running robot vulnerability probes and scrapers that are the early adopters of SVCB, here.

#djbwares #DomainNameSystem #svcb

Today I discovered the RFC 9460 and therefore the SVCB and HTTPS resource records. Very interesting and useful innovation :)

https://www.rfc-editor.org/rfc/rfc9460

#RFC9460 #RFC #DNS #SVCB #HTTPS

We now publish DNS HTTPS IP hint records for all #OpenStreetMap web services per #RFC9460 Why? Small incremental improvement to performance and privacy. Our DNS handles over 2,000 requests per second. DNS HTTPS query is our 2nd most common query. #DNScontrol #SVCB 🚀 🤓

@shaft Tiens, puisque tu parlais de #SVCB en mode alias : https://lists.dns-oarc.net/pipermail/dns-operations/2024-April/022531.html

#DNS

"ohttp" is now officialy the 8th wonder of the "Service Parameter Keys (SvcParamKeys)" registry :)

(And is the easiest to process when decoding a #SVCB RR :) )

#RFC 9540: Discovery of Oblivious Services via Service Binding Records
https://www.rfc-editor.org/info/rfc9540

There is a great summary of the state of HTTPS RRs (#SVCB style records) at https://netmeister.org/blog/https-rrs.html
Thanks @jschauma for writing this – it also explains in its footnotes why Chromium so far fails my https://svcbtest.amsuess.com/ test site – it doesn't allow setting a different target name.

🌘 RFC 9460：通過DNS進行服務綁定和參數規定（SVCB和HTTPS資源記錄）
➤ SVCB和HTTPS資源記錄的功能和用途
✤ https://www.rfc-editor.org/rfc/rfc9460
這篇文章介紹了RFC 9460中的SVCB和HTTPS DNS資源記錄類型，以便於查找連接到網絡服務（如HTTP源頭）所需的信息。這些資源記錄提供更多連接信息，從而提高性能和隱私保護。
+ 這篇文章對於SVCB和HTTPS資源記錄的功能和用途有很詳細的介紹。
+ 我對SVCB和HTTPS資源記錄的技術細節有了更深入的瞭解。
#網絡服務 #DNS #SVCB #HTTPS #資源記錄

Oh, and lastly, this whole Mastodon thread as a much more convenient blog post 😜:

https://www.netmeister.org/blog/https-rrs.html

#dns #svcb #https #rfc9460 ✌️

@jschauma They’re pretty great. #HTTPS records are self-explanatory, but do you know of any services using #SVCB yet?

Woohoo! #IETF #RFC9460 has been published: "Service Binding and Parameter Specification via the #DNS (#SVCB and #HTTPS Resource Records)". https://www.rfc-editor.org/rfc/rfc9460.html

Thank you to everyone has supported and contributed to this over the past almost nine years since the initial seeds were planted during discussions at a TLS 1.3 interim meeting.

SVCB has potential to have substantial impact across a wide range of Internet protocols. I'm thrilled to see how many drafts are already building on it.

Finally! RFC 9460 "Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)" #dns #https #svcb

Not a banking expert, but, if the FDIC decides to make good all deposits in a failed bank - Including the uninsured ones - maybe they should just insure ALL deposits and charge banks accordingly? This just means that the taxpayers pay for the uninsured deposits, right?
#bank #svcb #BankFailure

We've completely refactored the handling of #SVCB record data in the domain crate. #DNS #rustlang #OpenSource https://github.com/NLnetLabs/domain/pull/176

@partim has refactored the #SVCB record data to work along the same lines as all the other TLV-style types in the domain crate. #DNS #rustlang https://github.com/NLnetLabs/domain/pull/176

Curious what's coming up in the next release of your favourite #DNS resolver? #Unbound #EDE #SVCB #NAT64 #OpenSource https://github.com/NLnetLabs/unbound/milestone/2