Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Sep 2003 21:09:31 -0700 (PDT)
From:      John Polstra <jdp@polstra.com>
To:        Michael Edenfield <kutulu@kutulu.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Any workarounds for Verisign .com/.net highjacking?
Message-ID:  <XFMail.20030916210931.jdp@polstra.com>
In-Reply-To: <20030917022030.GE84494@wombat.localnet>

next in thread | previous in thread | raw e-mail | index | archive | help
On 17-Sep-2003 Michael Edenfield wrote:
> * John Polstra <jdp@polstra.com> [030916 21:27]:
> 
>> True, we could probably do it.  I guess we'd have to generate a few
>> random and unlikely queries, try them, and see if all/most of them
>> resolve to the same address.  Or maybe the to the same small set of
>> addresses, depending on how determined Verisign is to make this work.
> 
> "*.net" should work, since they basically added a * A record to .com and
> .net.  

Yep, that should work.

>> I just _love_ how Verisign doesn't even have a reverse DNS record for
>> that address.  Jerks.
> 
> root@basement:/usr/src# host 64.94.110.11
> 11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com

When I wrote the above, "host 64.94.110.11" didn't return anything.

John



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.20030916210931.jdp>