New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DNS queries are usually for a specific record #3

Open

peacekeeper opened this issue Sep 27, 2021 · 1 comment

Member

peacekeeper commented Sep 27, 2021

DNS queries have to be made for a specific RR, rather than retrieving "all" RRs in a zone and then filter them.

Therefore steps 3 and 5 in https://danubetech.github.io/did-method-dns/#resolve are a bit imprecise, and it may not be possible to just "retrieve all keys" with a single query.

Also, we have to make sure we have to be compliant with how the URI RR works (and we should reference RFC 7553 - https://datatracker.ietf.org/doc/html/rfc7553).

Compare to how section 3.1 on "Owner Name" is written here: https://datatracker.ietf.org/doc/draft-mayrhofer-did-dns/

letmaik mentioned this issue

Derive verification method id from key digest #9

Closed

Member Author

peacekeeper commented Oct 18, 2021

An entire DNS zone can be transfered using AXFR (https://en.wikipedia.org/wiki/DNS_zone_transfer), but this is often not enabled, and sometimes considered bad security practice.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment