fed tester does not check all IP addresses for .well-known

matrix-org / matrix-federation-tester

Tester for matrix federation written in golang.

77 stars 17 forks source link

fed tester does not check all IP addresses for .well-known #103

Open richvdh opened 4 years ago

richvdh commented 4 years ago

suppose you have both A and AAAA records for your primary domain; one of them works and one of them does not (eg incorrect TLS certs). It would be nice to check that all of the IP addresses work rather than the one that happens to return to the fed tester fastest.

fsa commented 9 months ago

The tester gives a false result if the main site operates only over IPv6, but does not have an IPv4 entry in the DNS. More precisely, servers that operate only using IPv4 will not be able to find the server address if there is no SRV record in the DNS.