The whole DNS rebinding thing makes this very complicated to implement correctly in browsers. (I.e. the public/private status of a domain name can change in tim

The whole DNS rebinding thing makes this very complicated to implement correctly in browsers. (I.e. the public/private status of a domain name can change in time under attacker control)