使用dns.he.net一天，发现漏洞一个

fansfan

我的一直是 @ + cname

vnconfig

RFC 规定，存在 CNAME RR 时不允许其他类型的 RR，包括 SOA。
这就是 @ 不允许 CNAME 的根本原因。
允许这样做的 domain hosting 是违反 RFC 的。

RFC 1034 Sec 3.6.2

The domain system provides such a feature using the canonical name
(CNAME) RR.  A CNAME RR identifies its owner name as an alias, and
specifies the corresponding canonical name in the RDATA section of the
RR.  If a CNAME RR is present at a node, no other data should be
present; this ensures that the data for a canonical name and its aliases
cannot be different.  This rule also insures that a cached CNAME can be
used without checking with an authoritative server for other RR types.

[ 本帖最后由 vnconfig 于 2010-8-17 19:04 编辑 ]