[Bug network/24255] resolver should handle special domains correctly

["milahu at gmail dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=24255

milahu <milahu at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |milahu at gmail dot com

--- Comment #4 from milahu <milahu at gmail dot com> ---
> for DNS, we cannot know if that the server is connected to Tor or not

imo, the optimal solution would be
to extend /etc/resolv.conf with something like

> option allow-domains *.onion

... to make tools like curl and git "just work"
on machines behind a transparent tor proxy
where these tools currently throw the error

> Not resolving .onion address (RFC 7686)

... and currently
we need non-transparent workarounds like

> curl --proxy socks5h://127.0.0.1:9050
> git -c remote.origin.proxy=socks5h://127.0.0.1:9050

... or expensive workarounds like "rebuild curl"
which on systems like nixos or guix means "rebuild the world"



this config belongs to /etc/resolv.conf
because its a machine-level config
which affects all DNS clients on that machine

the default config would be something like

> option deny-domains *.onion *.i2p



see also

https://github.com/curl/curl/discussions/11125
I want to resolve onion addresses

https://gitlab.torproject.org/tpo/core/torspec/-/issues/202
Formalize toggle override for non-Tor applications that follow RFC 7686

-- 
You are receiving this mail because:
You are on the CC list for the bug.