DNS Service Records
The SRV record or DNS Service record technique is thought to provide pointers to servers directly in the DNS (RFC 1035). As defined in RFC 2782, the introduction of this type of record allows administrators to perform operations rather similar to the ones needed to solve the problem PRQP addresses, i.e. an easily configurable PKI discovery service.
The basic idea is to have the client query the DNS for a specific SRV record. For example if an SRV-aware LDAP client wants to discover an LDAP server for a certain domain, it performs a DNS lookup for _ldap._tcp.example.com (the _tcp means the client requesting a TCP enabled LDAP server). The returned record contains information on the priority, the weight, the port and the target for the service in that domain.
The problem in the adoption of this mechanism is that in PKIs (unlike DNS) there is usually no fixed requirement for the name space used. Most of the time, there is no correspondence between DNS structure and data contained in the certificates. The only exception is when the Domain Component (DC) attributes are used in the certificate's Subject.
The DC attributes are used to specify domain components of a DNS name, for example the domain name example.com could be represented by using the dc=com, dc=example format. If the CA's subject field would make use of such a format, the Issuer field would allow client applications to perform DNS lookups for the provided domain where the information about repositories and services could be stored.
However, currently, the practice is very different. In fact it is extremely difficult for a client to map digital certificates to DNS records because the DC format is not widely adopted by existing CAs. For example, only one certificate from IE7/Outlook certificates store uses the domain components to provide a mapping between the certificate and an Internet Domain.
Read more about this topic: PKI Resource Query Protocol, Related Methods
Famous quotes containing the words service and/or records:
“We too are ashes as we watch and hear
The psalm, the sorrow, and the simple praise
Of one whose promised thoughts of other days
Were such as ours, but now wholly destroyed,
The service record of his youth wiped out,
His dream dispersed by shot, must disappear.”
—Karl Shapiro (b. 1913)
“It’s always the generals with the bloodiest records who are the first to shout what a hell it is. And it’s always the war widows who lead the Memorial Day parades.”
—Paddy Chayefsky (1923–1981)