voxpelli, (edited )
@voxpelli@mastodon.social avatar

Reminder that the only safe dummy domains to use are:

  • example.com
  • example.net
  • example.org

And nowadays there's also a safe dummy TLD: .example

These are safe because they are reserved by IANA as as special-use domain names for documentation purposes on direction of IETF in RFC 2606 and RFC 6761.

Any other domain can be registered and as such should never be used as a dummy domain for documentation or as eg. an example in default configs.

See: https://en.wikipedia.org/wiki/Example.com

pascal,

@voxpelli @briankrebs you may also use .invalid which is reserved, too.

voxpelli,
@voxpelli@mastodon.social avatar

@pascal @briankrebs Both .invalid and .test are reserved as well, true, but .invalid is by definition always an invalid domain name and .test should only be used to test the DNS system, hence not included.

For documentation purposes and other generic uses of a dummy domain the example ones should be preferred

baloo,
@baloo@sfba.social avatar

@pascal @voxpelli @briankrebs
Or wait for the .zip to go defunct. By google standards that should be a month or two away, roughly.

voxpelli,
@voxpelli@mastodon.social avatar

@baloo @pascal @briankrebs With that way of thinking you could also use any random unavailable TLD. You can never guarantee that a domain on such a TLD will never ever be registered in the future, as eg .zip and .dev has shown

Also: It’s very unlikely that Google will shut down a TLD. One can not easily simply just shut them down. Ask the Soviet Union about how the retirement of .su is going…

Also: Is Google still the owner of .zip or it transferred to Squarespace along with Google Domains?

baloo,
@baloo@sfba.social avatar

@voxpelli @pascal @briankrebs Sorry, that was just sarcasm.

No google domains and google TLD are two different entities.
By ICANN regulations, a single company can't be both a registry and a registrar. Google domains was the registrar, Charleston Road Registry is the registry.

Only the registrar transfers over to squarespace.

voxpelli,
@voxpelli@mastodon.social avatar

@baloo @pascal @briankrebs Kind of weird for Google to keep one but sell the other. Though I guess they want to keep it because it also owns eg .google

pmevzek,
@pmevzek@framapiaf.org avatar

@voxpelli @baloo @pascal @briankrebs Verisign bought NSI to be then both registry and registrar, and then sold back the registrar part as NetworkSolutions. So this happens from time to time, and business wise can be easily understood by the fact that all money is to be made at the registry level and not so much at the registrar level (for a pure domain name registrar, something that doesn't exist anymore, as all entities sell other products).

milosz,
@milosz@adventurousbeastie.eu avatar

@voxpelli It is also worth to mention that IPv4 documentation network blocks are 192.0.2.0/24, 198.51.100.0/24, and 203.0.113.0/24. IPv6 documentation network block is 2001:DB8::/32. See RFC 5737 and RFC 3849

atxulo,

@voxpelli I didn't know that and I've sometimes complained because some colleagues used example.org as an e-mail domain. Shame on me

image/gif

frederikstroem,

@voxpelli Quality toot ❤️

kkarhan,
@kkarhan@mstdn.social avatar

@voxpelli EXACTLY!

ANY proposed RFC that doesn't follow this rule gets instantly rejected!!!

That's why I use domain.example in my documentation:
https://github.com/greyhat-academy/pkd/blob/main/PKD.md

williampietri,
@williampietri@sfba.social avatar

@voxpelli
As a person with a couple of domains where people will make up email addresses that land in my inbox, thank you for mentioning this!

nazgul,

@voxpelli As the former owner of somewhere.com, I seriously endorse this statement. Like really endorse it. Shortly before I sold the domain I was bouncing 2.5 million email messages a day.

And trust me, you did not want to have the addresses “overtherainbow” or “someone” or “wormalert” (that’s another story).

Parienve,

@voxpelli
example.edu technically isn't an IANA-reserved domain, because .edu is a sponsored TLD. Ironically, ICANN is probably paying a $77/yr renewal fee for the domain.

pmevzek,
@pmevzek@framapiaf.org avatar

@voxpelli Technically not example.edu; see RFC 2606. Also there was a push to add the reserved list of country codes as useable for private needs: https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-private-use-tld-01

voxpelli,
@voxpelli@mastodon.social avatar

@pmevzek Yeah, I updated my post yesterday to indicate that + updated Wikipedia

isonno,
@isonno@mastodon.social avatar

@voxpelli Back in the early days of the web, a designer built a web site for a customer. Since all of the links weren't determined yet, she filled many of them in with "xxx" has a placeholder.

The customer, testing the prototype, clicked on one of the placeholder links. The browser of the era (probably IE 5) helpfully converted "xxx" to "xxx[.]com".

They were not pleased with the result.

nomeata,
@nomeata@mastodon.online avatar

@voxpelli So what domain do I put in the hole here in this documentation example snippet:

“Don't use real domains in documentation, but use the official example domains. For example, don't write ‘Type ping _ to test connectivity’ but write ‘Type ping example.com to test connectivity’.”

(I ♥️ diagonalization arguments.)

voxpelli,
@voxpelli@mastodon.social avatar

@nomeata When telling someone to do something, never give them an example of what not to do, as they may remember that rather than than your suggestion 😜

nomeata,
@nomeata@mastodon.online avatar

@voxpelli I'm not sure I understand. What should I not do? Can you give me an example? ;-)

waffle_iron,
@waffle_iron@nyan.lol avatar

@voxpelli me out there giving the evil eye to contoso.com

DavidJBianco,

@voxpelli As an ex-employee of a major US retailer, it was always fun* to see offensive security tool examples using the "target.com" domain.

*not actually fun

jcuccia,

@voxpelli How about .local?

voxpelli,
@voxpelli@mastodon.social avatar

@jcuccia Reserved for Multicast DNS (what Apple used to call Bonjour) and thus should not be used for anything else but that

voxpelli,
@voxpelli@mastodon.social avatar

@jcuccia If you eg. would name your MacBook “example” I am pretty sure it would announce itself as “example.local” on your local network

jcuccia,

@voxpelli Thanks.

zhenech,
@zhenech@chaos.social avatar

@voxpelli RFC2606 also defines the .invalid and .test top level domains, which are useful when writing tests etc

DamonHD,
@DamonHD@mastodon.social avatar

@voxpelli yep, been on the wrong end of one of my domains being fed to SPAMers as it couldn't possibly be real...

atoponce,
@atoponce@fosstodon.org avatar

@voxpelli I wrote a doc on this. Not only for domains, but also IP addresses and phone numbers.

https://gist.github.com/atoponce/4c94e964e0953c95c3d1e67454fbb7e7

alice,

@voxpelli See also: Google acquiring .dev and building Chrome to explicitly ignore your system's DNS settings and /etc/hosts lookup.

That… is part of why I refuse to use Chrome. I will not have my DNS or other network traffic hijacked by an advertising company known to share data with third-parties.

moonwalker,

@voxpelli how about example.invalid and example.test?
for those who are new to this, .invalid and .test are reserved domains, meaning that no one can purchase a domain with those domain name extensions

voxpelli,
@voxpelli@mastodon.social avatar

@moonwalker Those two reserved TLD:s are meant to indicate invalid domains and to test the DNS system though and should not be used for anything else, hence not relevant to list.

The TLD people should use as a dummy domain is .example

moonwalker,

@voxpelli got it :)

avirr,
@avirr@sfba.social avatar

@voxpelli I remember such relief figuring out that was safe to use in docs, back in the day

voxpelli,
@voxpelli@mastodon.social avatar

@avirr Yeah, same here, and when @utochin reminded me that not everyone have figured it out yet (which is quite obvious of course) that made me want to share it so that even more people could feel that relief and - um - a few more people than I anticipated felt a relief and wanted to boost 😅

elithebearded,
@elithebearded@fed.qaz.red avatar

@voxpelli I sometimes use .invalid domains

jef,
@jef@mastodon.social avatar

@voxpelli Yes please. Microsoft still uses my domain name in their hosts.txt file because decades ago they didn't know about RFC2606 and they are too stubborn to fix it.

voxpelli,
@voxpelli@mastodon.social avatar

@jef Yikes, that’s crazy

rpsu,
@rpsu@mas.to avatar

@voxpelli Cool, I had completely forgotten that the .example TLD exists.
The said RFC 2606 https://datatracker.ietf.org/doc/html/rfc2606 is probably the shortest RFC I’ve ever seen 🤓

passthejoe,
@passthejoe@ruby.social avatar

deleted_by_author

  • Loading...
  • justinz,

    @voxpelli what about example.zip? 🤣 @passthejoe

    voxpelli,
    @voxpelli@mastodon.social avatar

    Removed “example.edu” from the list + submitted a correction to the Wikipedia page as “example.edu” is not mandated in the IETF RFC:s, see:

    The “example.edu” appears to be in the same league as “example.se” and others – a class of second
    level domains that a TLD owner itself has voluntarily chosen to reserve for documentation purposes, which is different from the other three which are directed by IETF.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • tacticalgear
  • DreamBathrooms
  • everett
  • magazineikmin
  • osvaldo12
  • InstantRegret
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • thenastyranch
  • kavyap
  • khanakhh
  • cisconetworking
  • JUstTest
  • Durango
  • GTA5RPClips
  • ethstaker
  • provamag3
  • ngwrru68w68
  • normalnudes
  • cubers
  • tester
  • modclub
  • megavids
  • anitta
  • Leos
  • lostlight
  • All magazines