Canonical list of overly general domains?

Adam Langley agl at imperialviolet.org
Mon Jan 8 22:34:37 UTC 2007


On 1/6/07, Daniel E. Renfer <Duck at kronkltd.net> wrote:
> can't find a DNS entry for the domain part of the trust root then it's
> not a good candidate for a trust root.
>
> Maybe it's just my DNS servers, but I'm not getting a response for
> things such as "com" or "co.uk"

You mean a lack of an A record implies that it's overly general? I
think that would have both false positives and false negatives. For
example, googlepages.com is probably too general, but certainly has an
A record.


AGL

-- 
Adam Langley                                      agl at imperialviolet.org
http://www.imperialviolet.org                       650-283-9641



More information about the specs mailing list