3 ms·
I personally would find such an inscrutable name suspicious.
by ashtonkem 6y ago
I personally would find such an inscrutable name suspicious.
- gruez 6y agoWhy? Would connecting to "api.example.com" be less suspicious? The same issue would still be present (namely, smuggling requests to "shady" domains using a mundane domain), and the only difference would be that it demonstrates the author paid $10/yr for the domain.
- ashtonkem 6y agoI should be able to clearly determine the intention of any domain that an extension is going to call. Anything that tries to obsfucate the actual underlying purpose is a red flag. One might not like Google analytics, but at least you know exactly what you’re going to get when someone calls analytics.google.com.
- deleted 6y ago[deleted]