Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The operators of the .ai TLD for Anguilla have done this for a while and hit interesting bugs in mail clients.

(Also notable, they have an A record on the hostname "ai." - you can see their website at http://ai./)



the dot at the end is an ambiguity in a few specs. if I recall correctly, dns requires to end in a dot as it signals the root servers or something, but obviously can be left empty.

then browsers started to support it, but over time bugs pilled up and now it is treated as a different hostname (e.g. "www.example.org" is completely different to your browser than "www.example.org." even though they are the same to the dns spec)

then tls specs considers the dot in an earlier version, and they should be the same but because of the browser bugs it is all too much fun. my bank actually has a server that replies the same for domains with or without the root dot. but they only signed their certs for the no dot name, which again, is the same, but for browsers is kinda of not.

ah! living Standards.


The dot at the end has a technical meaning in two different contexts. The first is to disable search lists in the DNS stub resolver. If you try to look up, say 'ai', then the sub resolver is likely to append your current domain name during the lookup. Looking up 'ai.' disables that.

The other use is in DNS zone files where everything that does not end in a '.' get the name of the zone appended.

The for mail (SMTP) the dot at the end is implicitly present, and adding one is not allowed.

HTML/HTTP basically doesn't define semantics with respect to the dot at the end. That's why "www.example.org" and "www.example.org." are different. They are different strings, and nobody defined them to be equivalent. At the same time, the name is just passed to the stub resolver in many cases. So search lists may be applied under the hood.


Untrue. RFC 1738 was in fact quite explicit on this subject. It was almost universally disregarded.

* http://jdebp.info./FGA/web-fully-qualified-domain-name.html


ICAAN seemed to have prohibited this in 2013 [0], but "ai" still seems to be up so..

0: https://www.icann.org/news/announcement-2013-08-30-en


That's one of many ICANN rules which don't apply to country-code TLD operators.

Another example of a rule that's optional for them is ICANN's Uniform Dispute Resolution Policy. Indeed, only some of them have adopted it, with others using a variation and still others not basing any of their dispute mechanisms on the UDRP.


Your link will not work for all Systemd users, might want to mention that.

https://github.com/systemd/systemd/issues/6224#issuecomment-...


Pretty sad that this was prohibited for gTLD.

My (sister) company has the .schwarz tld, and they use blabla@mail.schwarz. Such a waste, really.


I get a "name not resolved" when trying to navigate to your link


are you using systemd?


Chrome on Windows




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: