From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep 16 21:09:37 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 759B016A4B3
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 21:09:37 -0700 (PDT)
Received: from blake.polstra.com (mail.polstra.com [206.213.73.132])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6DC0543FAF
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 21:09:36 -0700 (PDT)	(envelope-from jdp@polstra.com)
Received: from strings.polstra.com (strings.polstra.com [206.213.73.20])
	by blake.polstra.com (8.12.9/8.12.9) with ESMTP id h8H49VZj069443;
	Tue, 16 Sep 2003 21:09:35 -0700 (PDT)
	(envelope-from jdp@polstra.com)
Message-ID: <XFMail.20030916210931.jdp@polstra.com>
X-Mailer: XFMail 1.5.4 on FreeBSD
X-Priority: 3 (Normal)
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
In-Reply-To: <20030917022030.GE84494@wombat.localnet>
Date: Tue, 16 Sep 2003 21:09:31 -0700 (PDT)
From: John Polstra <jdp@polstra.com>
To: Michael Edenfield <kutulu@kutulu.org>
X-Bogosity: No, tests=bogofilter, spamicity=0.499974, version=0.14.5
cc: freebsd-hackers@freebsd.org
Subject: Re: Any workarounds for Verisign .com/.net highjacking?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2003 04:09:37 -0000

On 17-Sep-2003 Michael Edenfield wrote:
> * John Polstra <jdp@polstra.com> [030916 21:27]:
> 
>> True, we could probably do it.  I guess we'd have to generate a few
>> random and unlikely queries, try them, and see if all/most of them
>> resolve to the same address.  Or maybe the to the same small set of
>> addresses, depending on how determined Verisign is to make this work.
> 
> "*.net" should work, since they basically added a * A record to .com and
> .net.  

Yep, that should work.

>> I just _love_ how Verisign doesn't even have a reverse DNS record for
>> that address.  Jerks.
> 
> root@basement:/usr/src# host 64.94.110.11
> 11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com

When I wrote the above, "host 64.94.110.11" didn't return anything.

John