3 ms·
Domain verification doesn't do anything to prove that the target is a willing participant. A DNS record doesn't indicate that you own the underlying IP or CNAM
by kxrm 4y ago
Domain verification doesn't do anything to prove that the target is a willing participant. A DNS record doesn't indicate that you own the underlying IP or CNAME target. At best DNS based verification are only good at verifying things that specifically relate to the domain (SSL for example).
- adolph 4y agoOh like: Evil haxxxor: creates domain name pointed at target it doesn’t own Innocent stress test site: prove you own this domain by adding cname in the DNS record EH: sure, heh heh heh ISTS: performs ddos against target