[Cerowrt-devel] Wondering what dns lookups should be returning on local files...

[Cerowrt-devel] Wondering what dns lookups should be returning on local files...

[Jim Gettys]

[-- Attachment #1: Type: text/plain, Size: 970 bytes --]

I was accessing a local file via a file URL using google-chrome:
file:///home/jg/Personal/jgresume2014.html

I run the google-chome dnssec validator routinely. (found at:
https://chrome.google.com/webstore/detail/dnssec-validator/hpmbmjbcmglolhjdcbicfdhmgmcoeknm
)

It gives me a cheery "green" key icon on the local file, as one would hope.

It looks like it tried to validate "home" (though this may be an artifact
of chome), and returned:


*home**Secured by DNSSEC*

Nonexistence of the domain name home
 
was validated by DNSSEC.

The parent domain is secured by DNSSEC, thus it was possible to
successfully verify nonexistence of this domain name.

So this may be perfectly fine and expected; could be a google chome ism,
or is just an artifact of the validator plug-in.

But being paranoid, I thought I should report it and figure out where a
report should go (because, at best, the message is somewhat misleading).
                                         - Jim

[-- Attachment #2: Type: text/html, Size: 3610 bytes --]

Re: [Cerowrt-devel] Wondering what dns lookups should be returning on local files...

[Toke Høiland-Jørgensen]

[-- Attachment #1: Type: text/plain, Size: 893 bytes --]

Jim Gettys <jg@freedesktop.org> writes:

> It looks like it tried to validate "home" (though this may be an artifact of
> chome), and returned:
>
>        *     home              
>              Secured by DNSSEC 
>
>     *
>     Nonexistence of the domain name home
>
>     was validated by DNSSEC.
>
>     The parent domain is secured by DNSSEC, thus it was possible to successfully
>     verify nonexistence of this domain name.
>
> So this may be perfectly fine and expected; could be a google chome ism, or is
> just an artifact of the validator plug-in.

My guess would be that it validates (from the root servers) that there's
no TLD called 'home'. You could try creating a folder /com and opening
a file from there, and see if it tells you that 'com' exists.

I think I would consider it a bug in the validator that it doesn't
exclude file:// URLs :)

-Toke

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 489 bytes --]

Re: [Cerowrt-devel] Wondering what dns lookups should be returning on local files...

[Valdis.Kletnieks]

[-- Attachment #1: Type: text/plain, Size: 454 bytes --]

On Mon, 24 Mar 2014 10:56:31 -0400, Jim Gettys said:

> I was accessing a local file via a file URL using google-chrome:
> file:///home/jg/Personal/jgresume2014.html

> It looks like it tried to validate "home" (though this may be an artifact
> of chome), and returned:

Somebody needs to be smacked around with a large trout for that one.  The
validator should only be checking URI classes that actually contain a hostname.

So that's a big ol' bug. :)

[-- Attachment #2: Type: application/pgp-signature, Size: 848 bytes --]