|
|
|
|
|
by retcond
1220 days ago
|
|
Not the only slogan actually, "The Dot In Dot Com" ran with several important campaigns at the beginning of the nineties and was a crucial security public service announcement that's explained here : https://daniel.haxx.se/blog/2022/05/12/a-tale-of-a-trailing-... THE money quote : The trailing dot then means the name is to be used actually exactly only like that, it is specified in full, while the name without a trailing dot can be tried with a domain name appended to it. Or even a list of domain names, until one resolves. This makes people want to use a trailing dot at times, to avoid that domain test." |
|
But more recently that knowledge got some relevance in Kubernetes clusters to me: By default they use the `cluster.local.` domain. As that is configurable, now many people leave that out and rely on the search domain config. In consequence in some situations a broken service may try to connect to the outside and with bad choice of i.e. namespace names might leak as valid host names on the public DNS ... which in worst names can lead to a connection attempt from cluster to some foreign system.