3 ms·
I don’t understand. What has DNS got to do with HTTP? If I connect to http://foobar.onion/ http://foobar.onion/ it’s not using DNS, isn’t that what they mean by
by zarzavat 4y ago
I don’t understand. What has DNS got to do with HTTP? If I connect to http://foobar.onion/ http://foobar.onion/ it’s not using DNS, isn’t that what they mean by “not requiring a particular lookup technology”?
And what is the issue with A/AAAA records exactly?
- stock_toaster 4y agoI assume the parent was hoping for SRV record support.
- inopinatus 4y agoSRV is a probably a smidgen shy of what HTTP needs in 2022, although if the protocol were invented today it’d be a shoo-in for resolution in the common case.
- inopinatus 4y agoThis is pointless hairsplitting. RFC7686 is a DNS RFC, one that specifies and enables special application handling when stipulated conditions are met. Even if HTTP/3 defined its use of DNS records adequately, the special case still takes precedence and onion routing continues to occur in browsers supporting it. In my view the use of a special-case TLD is deeply problematic since it contains the potential to leak your use of Tor via applications or resolvers that do not grok the exception, but that's a design problem for another day. The problems with using host address records for service location are multifaceted but the most significant are a) their conflict with other services at the same label, most commonly when the web hosting requires a CNAME, which cannot co-exist with any other record, and b) they're crude; full-grown origin discovery could support priorities, fallbacks, protocol upgrades, variation by transport, alternate ports and more besides.