3 ms·
Yeah, that is definitely possible. I mean, hopefully it is over HTTPS so they can't do anything with it... but if it isn't then it can definitely happen. Our s
by mej10 10y ago
Yeah, that is definitely possible.
I mean, hopefully it is over HTTPS so they can't do anything with it... but if it isn't then it can definitely happen. Our servers get random web traffic all of the time.
- bhauer 10y agoTrue. I am not aware of any web services POSTing sensitive data over the public Internet that don't use HTTPS. If your service is sending sensitive data over HTTP without TLS, I feel the problem is bigger than a potential long-lived DNS resolution.
- leesalminen 10y agoValid point! One would hope that does not happen.
- woot01 10y agoHTTPS does not protect you against sending data to a host owned by another company.
- leesalminen 10y agoCorrect, but they wouldn't be able to decrypt the data.
- icebraining 10y agoThe data doesn't even get there, the handshake kills the connection before that.
- aianus 10y agoYes it does, the cert presented by api.othercompany.com would not pass validation when you're trying to open a connection to api.intendedcompany.com.
- icebraining 10y agoI mean, hopefully it is over HTTPS so they can't do anything with it... DV certs only rely on you being able to reply to an HTTP request, so if any CA was using such a caching DNS server, you could probably get a valid cert from them.