Re: draft-ietf-dnsext-apl-rr-01.txt

["Eric A. Hall" <ehall@ehsco.com>]

Patrik Fältström wrote:

> But, as indexing doesn't work in LDAP globally, searching in LDAP
> (which you need for looking up names) doesn't work. This means that
> searching for information doesn't work regardless of whether you use
> LDAP or DNS.

It's not supposed to work. Federated namespaces are not easily searched.
Instead, you localize a search to a specific realm and hope for the best
from that. If you want global searching, write a catalog server to index
all of the data and search that. There is room for an ldap equivalent of
google, there are lots of first-run efforts out already (bigfoot, four11
and others were ldap searchable once).

Somebody could do the same thing with DNS even, BUT the important
distinction is that the DNS protocol doesn't provide for incomplete
searches. The inverse query allows you to search by value and type, but it
does not allow for incomplete value. Good luck finding a resolver which
can wring out an iquery as well. From this perspective searching in DNS
will not work using existing tools, while LDAP can be made to work.

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/


to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.