4 ms·

DDOS is essentially the exact opposite of what the parent comment is talking about.

• anonymoushn 4y ago
  Can you explain how "require that UDP packets be sent exclusively within the same domain as the originating code" does not address any of that comment's concerns, or are you just nitpicking?
  • quietbritishjim 4y ago
    Oops, I misunderstood "same domain", sorry.
  • formerly_proven 4y ago
    Same domain is pretty meaningless until all browsers mitigate DNS rebinding, which as far as I know they still don't. And even that would presumably only help with private IPs.
  • kragen 4y ago
    evil.example.com can easily set up a subdomain such that 192-168-2-44.home.evil.example.com resolves to 192.168.2.44, so requiring that UDP packets be sent exclusively within the same domain as the originating code doesn't help at all.
    • redox99 4y ago
      That wouldn't work, the same way CORS can't be bypassed that way. It was to be the exact same origin.
      • jhugo 4y ago
        You can rebind the exact same origin then.
      • dolmen 4y ago
        CORS work because the target is HTTP and exposes permissions in headers. There is no HTTP headers for raw UDP.