pmeerw's blog

Tue, 16 May 2023

DNS, minimal ANY queries

RFC 8482 deprecates DNS ANY queries. These were mostly used for debugging, i.e. retrieving all information for a domain. DNS server now just respond with HINFO "RFC8482" "" in the CPU and OS field of the HINFO response to indicate that information has been suppressed.

See also Cloudflare blog on this topic.

And the (hard to come by) configuration for bind9 is (tada!):

minimal-any yes;
Use dig +tcp to get a full response (see here).

posted at: 10:24 | path: /configuration | permanent link

Made with PyBlosxom