Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Just to clarify, the qname minimization is a privacy technique used during recursion to only disclose what's absolutely necessary.

Traditionally if you're querying www.google.com, you'll:

1. ask root name servers for www.google.com and get list of com name servers 2. ask com name servers for www.google.com and get list of google name servers 3. ask google name servers for www.google.com and get the response

With qname minimization you would:

1. ask root name servers for com TLD and get list of com name servers 2. ask com name servers for google.com and get list of google name servers 3. ask google name servers for www.google.com and get the response

The AWS DNS servers don't strictly follow rfc and don't provide correct responses in specific cases



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: