From owner-freebsd-questions@FreeBSD.ORG Wed Dec 17 22:25:03 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F34B11065687 for ; Wed, 17 Dec 2008 22:25:02 +0000 (UTC) (envelope-from dan-freebsd-questions@ourbrains.org) Received: from ourbrains.org (li48-221.members.linode.com [66.246.76.221]) by mx1.freebsd.org (Postfix) with SMTP id 80F888FC1C for ; Wed, 17 Dec 2008 22:25:02 +0000 (UTC) (envelope-from dan-freebsd-questions@ourbrains.org) Received: (qmail 4976 invoked by uid 1000); 17 Dec 2008 22:25:23 -0000 Date: Wed, 17 Dec 2008 17:25:23 -0500 From: Dan To: freebsd-questions@freebsd.org Message-ID: <20081217222523.GA4956@ourbrains.org> Mail-Followup-To: freebsd-questions@freebsd.org References: <26face530812170701n4160dba2ve183d8860b6d4a69@mail.gmail.com> <49491705.5060108@pixelhammer.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <49491705.5060108@pixelhammer.com> User-Agent: Mutt/1.5.18 (2008-05-17) Subject: Re: Publishing information via DNS X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Dec 2008 22:25:03 -0000 DAve(dave.list@pixelhammer.com)@2008.12.17 10:13:09 -0500: > Kelly Jones wrote: >> Has anyone tried publishing non-DNS information via DNS? Advantages: >> >> % Automatic distributed caching on various nameservers. >> >> % UDP, so no TCP overhead >> >> I know SPF uses this, and clamav publishes their current version >> number this way, but has anyone done this on a large scale basis? >> > > Someone needs to invent and promote a TextualDatagramPublicationProtocol > or TDPP because DNS has been abused for publishing non DNS data for too > long. Continuing to use DNS for things it was never intended to do will Like we need another protocol. The security issues with DNS are mostly BIND-related, it's BIND's fault. If you want to publish a large hierarchical directory database, then there's LDAP. Protocol adoption is an issue. LDAP is very slowly becoming more and more popular.