From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep 16 23:12:42 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2E56416A4B3
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 23:12:42 -0700 (PDT)
Received: from firecrest.mail.pas.earthlink.net
	(firecrest.mail.pas.earthlink.net [207.217.121.247])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7797343F3F
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 23:12:41 -0700 (PDT)
	(envelope-from tlambert2@mindspring.com)
Received: from user-2ivfm4d.dialup.mindspring.com ([165.247.216.141]
	helo=mindspring.com)
	by firecrest.mail.pas.earthlink.net with asmtp (SSLv3:RC4-MD5:128)
	(Exim 3.33 #1)	id 19zVYL-0000zX-00; Tue, 16 Sep 2003 23:12:37 -0700
Message-ID: <3F67FB1F.D7269739@mindspring.com>
Date: Tue, 16 Sep 2003 23:11:44 -0700
From: Terry Lambert <tlambert2@mindspring.com>
X-Mailer: Mozilla 4.79 [en] (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Clifton Royston <cliftonr@lava.net>
References: <20030916102356.A11571@lava.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-ELNK-Trace: b1a02af9316fbb217a47c185c03b154d40683398e744b8a45ba186a563b17003296a209c6334cadf350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
cc: freebsd-hackers@freebsd.org
Subject: Re: Any workarounds for Verisign .com/.net highjacking?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2003 06:12:42 -0000

Clifton Royston wrote:
>   For those who don't know what I'm talking about, try executing "host
> thisdomainhasneverexistedandneverwill.com", or any other domain you'd
> care to make up in .com or .net.  Verisign has abused the trust placed
> in them to operate a root name server, by creating wildcard A records
> directly under .com and .net, which point to Verisign's "search"
> website.

If you get their A record in your resolver, pretend you got the
standard error instead.  It's a really easy resolver hack.

-- Terry