4 ms·

I don't think it has anything to do with DNS rebinding, but it seems like it would have a lot to do with having unauthenticated RPC services bound to localhost.

• benchaney 9y ago
  Well... > I do think that Ethereum ought to authenticate it's JSON-RPC service, but not because of DNS rebinding.
  • mikeash 9y ago
    I'm a bit lost, because right before that you described it as "reasonable assumptions about localhost" when they don't seem at all reasonable to me.