<div dir="ltr">Hi guys!<div><br></div><div>Any feedback from that? By the way...Well done in Berlin!!!</div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-10-09 13:59 GMT+01:00 Federico Olivieri <span dir="ltr"><<a href="mailto:lvrfrc87@gmail.com" target="_blank">lvrfrc87@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi all,<div><br></div><div>I was running a DNS test (from <a href="https://www.grc.com/dns/dns.htm" target="_blank">https://www.grc.com/dns/dns.htm</a>) on my DNS server. From the result I could see the "Alphabetic Case" test. I din't know about this feature and I googoled. That is what the website says:</div><div><br></div><div><ul style="margin:0.75em 0px 1em 20px;padding:0px;border:0px;color:rgb(0,0,153);font-family:verdana,tahoma,arial,helvetica,sans-serif,'MS Sans Serif';font-size:13.3333px"><li style="margin:0px 0px 1em;padding:0px;border:0px"><b>Alphabetic Case:</b><br>The DNS system is not sensitive to alphabetic case, so the domain “<a href="http://WWW.GRC.COM" target="_blank">WWW.GRC.COM</a>” is identical to “<a href="http://www.grc.com" target="_blank">www.grc.com</a>”. DNS is designed to <u>ignore but preserve</u> the alphabetic case used in queries and replies. This creates an opportunity for a DNS resolver to add additional unknown bits of “entropy” to its queries by randomly changing the case of any alphabetic characters in the queried domain name. When replies are received, only the valid replying nameserver that received the mixed-case query could know the proper case for its reply. No spoofing server would know. This would give a clever resolver another way to reject spoofed replies. We know of no nameservers that are deliberately mixing case in this way, but through this test we are helping you to keep your eye out for any.</li></ul><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px">I had a look to PDNS website but I didn't find any relevant information to understand if pdns support this feature (from the test result seems not supported)</span></font></div></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px"><br></span></font></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px">Do you have extra info about that?</span></font></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px"><br></span></font></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px">Thanks</span></font></div><span class="HOEnZb"><font color="#888888"><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px"><br>Federico</span></font></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px"><br></span></font></div><div><font color="#000099" face="verdana, tahoma, arial, helvetica, sans-serif, MS Sans Serif"><span style="font-size:13.3333px"><br></span></font></div></font></span></div>
</blockquote></div><br></div>