← Back to release summary

Deprecate And Remove Support For Invalid DNS Names

Category
Network / Connectivity
Type
New or changed feature
Status
Removed (Chrome 69)
Intent stage
Removed

Summary

We have a security vulnerability that is rather long in the tooth (not yet public) that depends, in part, on our DNS resolver’s willingness to attempt to resolve arbitrary garbage strings, including strings that could not ever be valid hostnames. I propose to remove support for such requests in our DNS resolution code, and attempt only to resolve legal hostnames (“preferred name syntax”). Additionally, I propose we accept underscores (_) in names. (See the measurement CL.)

Motivation

Reduce exposure to bugs.

Standards & signals

Docs: https://docs.google.com/document/d/13NhCJ-AN7gGNmcJML8wYTpMo7OowcPzF2s4M_Ts5v5k/edit

View on chromestatus.com