[DRIVERS-2123] Add justification for host/domain requirements Created: 26/Mar/19  Updated: 31/Mar/22

Status: Backlog
Project: Drivers
Component/s: Initial DNS Seedlist Discovery
Fix Version/s: None

Type: Spec Change Priority: Minor - P4
Reporter: Jeremy Mikola Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Related
related to DRIVERS-2057 Determine how drivers should handle t... Backlog
is related to DOCS-12574 Clarify required host/domain format f... Closed
Driver Changes: Needed

 Description   

The spec currently requires at least two dots in a hostname string for the mongodb+srv scheme (e.g. "foo.example.com" but not "example.com" or "example"). This requirement is mentioned in the spec, but we don't explain why. Since this isn't a general requirement for SRV records (see: RFC2782), we would do well to explain this design choice in the Justifications section.

david.golden's comment may serve as a basis for this explanation:

IIRC, the number of dots requirement was a security-related issue, to try to guarantee subdomains. So that "good.com" SRV record can't return "db1.evil.com".


Generated at Thu Feb 08 08:24:47 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.