IPv4-Mapped IPv6 Address used in DNS with AAAA-records

[Jay Hennigan]

On 7/28/23 16:28, Brian E Carpenter wrote:

> I just stuck this in the hosts file on Windows: ::ffff:8.8.8.8 
> www.google.com
> and now I can't reach Google any more... Error code: 
> SSL_ERROR_BAD_CERT_DOMAIN

www.google.com isn't hosted on 8.8.8.8.

Try:

::ffff:8.8.8.8  dns.google

for a valid test.

> So I would be surprised if they have got this working in all cases without
> any such issues. At least they have to configure tolerant certs.
> 
> Interestingly, since Thomas mentioned IBM, ::ffff:23.43.149.178 www.ibm.com
> works without certificate errors (and that's via Akamai). So not everybody
> is as strict with their certificates as Google.
> 
>     Brian

-- 
Jay Hennigan - jay at west.net
Network Engineering - CCIE #7880
503 897-8550 - WB6RDV