3 ms·
I'm confused. Who put those domains used by Windows Update in the router DNS blocklist? Is it the author since he said he configured it? If so, why is he blamin
by belltaco 4y ago
I'm confused. Who put those domains used by Windows Update in the router DNS blocklist? Is it the author since he said he configured it? If so, why is he blaming the user's employer company for it? And did he put them in to block Windows updates on purpose like he said he wanted to at the end? Wouldn't that block Windows Updates on all computers at home for that user?
Why would a large company want to route what could be gigabytes of Windows updates per computer through the corporate VPN for 100K+ employees thereby slowing down the corporate VPN introduce lag into remote desktop connections and VOIP calls/screenshares, and potentially paying a lot more in bandwidth fees?
- RajT88 4y agoWindows updates (some? Not all?) come down over port 80. That rubs security folks the wrong way. There is extra validation (chiefly, digital signatures) which protect against MITM attacks, but some still think the bandwidth is worth the risk mitigation.
- belltaco 4y agoIt changed recently I think https://www.onmsft.com/news/microsoft-update-catalog-uses-https https://www.onmsft.com/news/microsoft-update-catalog-uses-ht...
- RajT88 4y agoAh, did not realize! A year back I was exposed to a white paper under NDA explaining the security posture. Also, the PM's had mentioned changes were underway. Normally it is not under my purview, hence why I did not realize the recent change.
- deleted 4y ago[deleted]
- willcipriano 4y agoI can see why "watson.telemetry.microsoft.com" was added. Id block that too if I saw it on my network.