Assuming you're running your own DNS server, you could also check the logs to see how many queries you get for the "port" SvcParamKey.
My guess is it will be a very small number.
Any DNS responses for an HTTPS/SVCB record will always include all parameters, so you can't really test things that way. But I do run my own DNS server, and in the past 90 days, it issued 206 071 A responses, 122 314 AAAA responses, and 4 426 HTTPS responses, so HTTPS RR requests are still fairly rare.
Your numbers are more than 10 times higher than mine.
The sad thing is that the HTTPS resource record type will not upgrade HTTP directed to one domain into HTTPS directed to another domain. The RFC's examples (in section 10 and elsewhere) indicate that this should work. I made one of my WWW sites inaccessible to several modern WWW browsers for a day learning that in practice it does not.
One could view this as malicious compliance with section 9, as WWW browser writers have a decades long history, including the famous Chrome, Mozilla, and WebKit bugs, of fighting against DNS mechanisms that fix the apex problem.
* https://jdebp.uk/FGA/dns-srv-record-use-by-clients.html#HTTP...
A more charitable view is that, this being the 2020s, they simply did not give much attention to the case of HTTP. The idea exists on paper in the RFC, but in practice I wonder whether I am one of just a few people who has actually tried apex aliasing from HTTP to HTTPS (as opposed to aliasing from HTTPS to HTTPS).
Looks like only about 9% are actually returning HTTPS records; and none of these use non-standard ports or ECH (which mystifyingly hasn't made it out of committe).
Findings: https://dweekly.github.io/9460/ Source: https://github.com/dweekly/9460 ECH draft: https://datatracker.ietf.org/doc/draft-ietf-tls-esni/25/
altairprime•4mo ago