*.proposal.wintercg.org not reachable in firefox

[bnoordhuis]

I can curl https://common-min-api.proposal.wintercg.org/ but not firefox https://common-min-api.proposal.wintercg.org/ (edit: on ubuntu) - the latter fails persistently with a NS_ERROR_UNKNOWN_HOST and I believe this is due to the somewhat unusual CNAME construct:

$ dig common-min-api.proposal.wintercg.org +short
proposal-*.deno.dev.
34.120.54.55

Supporting evidence: it starts working the moment I add a 34.120.54.55 common-min-api.proposal.wintercg.org stanza to my /etc/hosts.

Also applies to the other *.proposal.wintercg.org domain names.

Small aside: proposal.wintercg.org has no A or AAAA records.

[legendecas]

I can reproduce the problem in Firefox on macOS.

[Jolg42]

Similar issue in wintercg/proposal-common-minimum-api#59 (like pointed out by @legendecas there)

Does this direct url works for you?
https://proposal-common-min-api.deno.dev/

[bnoordhuis]

Yes, https://proposal-common-min-api.deno.dev/ works.

[melroy89]

Yes, https://proposal-common-min-api.deno.dev/ works.

I can confirm this as well here.

[lucacasonato]

@jasnell Can you update the DNS record to not have this weird CNAME?

[thescientist13]

Just tested myself on FF (121) + macOS (Sonoma) and was able to load the site OK.

[melroy89]

Which URL did you test.. since https://proposal-common-min-api.deno.dev/ should always work, but https://common-min-api.proposal.wintercg.org/ can give issues. You should test the latest URL on Ubuntu 22.04 (Linux at least) using Firefox (121).

[thescientist13]

@melroy89 I tested the URL provided in the issue description

https://common-min-api.proposal.wintercg.org/

Seems like it is (mostly) specific to Linux (Ubuntu), but seems like someone else as on macOS and ran into the issue so not sure what the correct takeaway is from that, but just wanted to share my experience in case it helped in debugging or to at least add another data point to consider.

[melroy89]

Yea indeed.. It's under Firefox Linux.

It does seems DNS related. I switched to DNS over HTTPS of OpenDNS: https://doh.opendns.com/dns-query. Now it does seem to work fine under Linux:

[wesgarland]

common-min-api.proposal.wintercg.org is a CNAME for proposal-*.deno.dev

That's not how you make a CNAME for a wildcard record, and I wouldn't be surprised to find some resolv libs choking on the asterisk. Change the DNS zone file to have something like

IN CNAME proposal-wintercg.deno.dev.

(note the trailing dot) and it should work fine.