4 ms·
Keep in mind that this is an A record (and a TXT one) not an MX record, the only thing they can do with it is change the content of the site (which is what you
by Illniyar 9y ago
Keep in mind that this is an A record (and a TXT one) not an MX record, the only thing they can do with it is change the content of the site (which is what you want them to do).
Tough I've known extremely incompetent IT support, I think even they would be suspicious of someone proving his identity by making a "this is me" html page.
- eli 9y agoAnd potentially get a valid ssl certificate for your domain.
- megous 9y agoAnd do HPKP for a while and throw away the key.
- stevekemp 9y agoEmail will fall back on an A-record if there is no MX record present...
- gramakri 9y agoNever heard of this behavior before but you appear to be right - https://stackoverflow.com/questions/1666807/email-validation-mx-lookup https://stackoverflow.com/questions/1666807/email-validation.... TIL
- floatingatoll 9y agoThis is a validation method supported by the major SSL certificate issuers, used primarily when approving a request by a third party (e.g. Akamai). They email you a hash, you put it in a webpage at a URL they specify, they approve the third party issuance. The point is not whether or not this domain parking thing uses two DNS records that do or do not include MX. The point is that, given a social engineering opportunity (“free domain parking with JUST 2 records”), an attacker can do extraordinary things.