Search Again:

Re: Multiple CNAMES... who cares?

From: Men & Mice Support
Date: Friday, July 30, 1999
Time: 11:10:00 pm

>>Sorry for the rant, but this reliance on PTR records for evidence of US
>>location is one of my pet peeves.
>
>I was under the impression that it is not just for "evidence" but also to
>prove that you are who you say you are.

For the FTP and IRC servers you mention, yes, it often is used as evidence
of that. This is done by resolving the IP address to a name, then resolving
the name back to an address. If the two addresses match, the case is
"proven".

However, such things only keep out amateur hackers. Anyone serious about it
can easily set up their own DNS server and circumvent such measures. Still,
keeping out amateurs isn't a bad idea.

What bugs me is the insistence that you have a PTR record that resolves to
a US domain, before you're allowed to download high-encryption software.
It's never been a problem for me, because I'm in the US and have properly
configured PTR records. It's just that it's so easy to defeat, and there is
a better way. I guess it's Netscape's (and others') way of thumbing their
nose at silly US export laws.

At any rate, whether my pet peeve is irrational, my original point stands:
PTR records aren't needed for a server in any client-server interaction
that I've ever heard of. Just for clients, and for peers in peer-to-peer
interaction (e.g. SMTP servers).

Therefore, there's no problem using multiple A records for a given address,
so long as only one such name is used in MX records.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com http://www.menandmice.com



Messages In This Thread:



Return to Digital Point Solutions' Home Page