Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Breaking DNS with Wildcard records: Page 2 of 3

If Charter Communications, users are only surfing the WWW sites using browsers, then DNS wildcards might actually be useful, but DNS wildcards break all other IP applications that use domain names. Earthlink has a similar service and they offer an opt-out option that requires users to specify DNS server in their IP configurations. What I find really disturbing is the language the ISP use to describe the benefit of wildcard. Earthlink says "In rare circumstances DNS error page routing may cause problems for some EarthLink customers running various specialty programs or services." I guess specialty programs includes email, ftp, on-line games, IRC, IM, and any number of common IP applications. The very fact that someone mistyped a URL is an error and sending the user to a search page is plain confusing.

Proper Error Handling
Verisign got into hot water back in 2003 with its SiteFinder service that used wildcards in the .com and .net zones that acted like a global redirect and finally withdrew Sitefinder after much public outcry and the involvement of Internet Corporation for Assigned Names and Numbers (ICANN) directed Verisign to suspend the service. Many of the complaints had to do with breaking services like anti-spam and anti-phishing that relies on DNS to locate host names.




IE Search Copy



Click to Enlarge

There are so many IP applications that use domain names and already have mechanisms to handle irresolvable host names, there is no point in doing the error handling in the network. In fact, doing so breaks any error handling the applications perform. Web browsers like IE7 will helpfully redirect users to search engines when a domain name doesn't resolve. That's OK because the tool you are using, the browser, is at least doing something smart that doesn't break other IP based programs. An FTP program will tell users a host couldn't be found, with wildcard domain names, that FTP program will throw a very different error???Couldn't connect to host???which means something very different than hostname not found.

Charter Communications, and other service providers, are trying to be helpful with their wildcard service. They are trying to help the average user get to the content they are looking for. But don't break DNS to do so.