IPv4-Mapped IPv6 Address used in DNS with AAAA-records

[Brian E Carpenter]

On 29-Jul-23 11:58, Jay Hennigan wrote:
> On 7/28/23 16:28, Brian E Carpenter wrote:
> 
>> I just stuck this in the hosts file on Windows: ::ffff:8.8.8.8
>> www.google.com
>> and now I can't reach Google any more... Error code:
>> SSL_ERROR_BAD_CERT_DOMAIN
> 
> www.google.com isn't hosted on 8.8.8.8.

Oh spit, brain glitch there...

> 
> Try:
> 
> ::ffff:8.8.8.8  dns.google

I don't think that serves HTTPS, but
::ffff:142.250.204.4 www.google.com
works OK, so maybe the horrible hack does actually work.

Sorry for the interruption.

     Brian


> 
> for a valid test.
> 
>> So I would be surprised if they have got this working in all cases without
>> any such issues. At least they have to configure tolerant certs.
>>
>> Interestingly, since Thomas mentioned IBM, ::ffff:23.43.149.178 www.ibm.com
>> works without certificate errors (and that's via Akamai). So not everybody
>> is as strict with their certificates as Google.
>>
>>      Brian
>