[62104] in North American Network Operators' Group
Re: Change to .com/.net behavior
daemon@ATHENA.MIT.EDU (Duane Wessels)
Tue Sep 16 00:54:41 2003
Date: Mon, 15 Sep 2003 22:53:58 -0600 (MDT)
From: Duane Wessels <cee4@packet-pushers.com>
To: nanog@nanog.org
In-Reply-To: <20030915232429.GA15402@chinook.rgy.netsol.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 15 Sep 2003, Matt Larson wrote:
>
> Today VeriSign is adding a wildcard A record to the .com and .net
> zones.
The Web Proxy Auto-discovery Protocol (WPAD) is another reason to
fear and loathe this change. If your host has a bogus name and
makes a WPAD request, they can send your browser a proxy config
function and take full control of your browsing.
Not that they would ever stoop so low... *cough*
Duane W.