3 ms·
Another reason it's nonsensical: when a DNS response is too large to fit in the payload of a UDP datagram, the server sets the TC bit in the response header (a
by philsnow 4y ago
Another reason it's nonsensical: when a DNS response is too large to fit in the payload of a UDP datagram, the server sets the TC bit in the response header (alongside whatever truncated results it feels like including), notifying the client of the truncation. The client optionally (but SHOULD) falls back to retrying the query over TCP.
https://serverfault.com/a/698254 https://serverfault.com/a/698254
- zinekeller 4y agoSlowly looks at musl's direction. (musl doesn't even try DNS/TCP after receiving a TC packet)
- tptacek 4y agoYes, this is a pretty grave flaw.