Keith Davidson wrote:
> Juha wrote:
>> 2-daaayyoh, 2-day-ay-ay-oh. Internet sucks and me wanna go home.
>>
>> Anyway, things seem to be working again.
>>
>> So who's going to roast point the Giant Flamethrower at Marina Del
>> Rey? Perhaps this is a job for Captain InternetNZ?
>
> I guess it could be a job for InternetNZ. But it occurs to me that
> Veri$ign are doing nothing "wrong", it's just not within the spirit
> of Internet practices?
[snip]
Maybe not "wrong" exactly but...
RFC 1912 (Informational)
Wildcard As and CNAMEs are possible too, and are really confusing to
users, and a potential nightmare if used without thinking first. It
could result (due again to domain searching) in any telnet/ftp
attempts from within the domain to unknown hosts to be directed to
one address. One such wildcard CNAME (in *.edu.com) caused
Internet-wide loss of services and potential security nightmares due
to unexpected interactions with domain searching. It resulted in
swift fixes, and even an RFC ([RFC 1535]) documenting the problem.
RFC 1535 makes interesting reading.
--
Andrew Stephen DDI: +64 4 460 6849
IT Security Architect Mobile: +64 25 582 304
New Zealand Post Fax: +64 4 494 4299
"...shouldn't a DMZ actually be called a Free Fire Zone?"
-- Chris Mahn, Three Tiered DMZ's, May 2001
This email with any attachments is confidential and may be subject to legal
privilege. If it is not intended for you please reply immediately, destroy
it and do not copy, disclose or use it in any way.
