16 Jan
2023
16 Jan
'23
7:25 p.m.
It's actually a pretty important security feature. DNS rebind attacks are
relatively easy to carry out, and in a world where devices on peoples home
networks generally have very poor security posture, and generally do not
use SSL (which can limit them impact of rebind attacks), DNS rebind
protection is one of the easiest ways to stop such attacks completely.
https://unit42.paloaltonetworks.com/dns-rebinding/ has a good description
of the problem.
Scott
On Mon, Jan 16, 2023 at 5:10 PM Joe Abley
On Mon, Jan 16, 2023 at 19:41, Scott Howard
wrote: The term you're looking for to plug into Google is "DNS rebind protection", and it's common across a lot of consumer routers.
Sounds like a fun phrase to describe a terrible idea!
Joe