5 ms·
I don't understand why google or microsoft even doesn't distribute a list of their IP addresses for their online properties with Chrome/Windows respectively. T
by guimarin 15y ago
I don't understand why google or microsoft even doesn't distribute a list of their IP addresses for their online properties with Chrome/Windows respectively. That way you could get a pop-up that said, 'google.com is no longer resolving, fall back on the hardcoded list?' Then a check-box for never asking me again.
Google/Microsoft and other big properties could even push this out as a 'Security Feature' to prevent DNS spoofing attacks. I understand that that would lead to banning of actual IPs by governments, but given the organization of the internet, that is a bit harder than mucking around with DNS.
- simonbrown 15y agoYou think that would make sense to most Chrome/Windows users?
- vegardx 15y agoYou never want to hardcode anything like that. You use DNSSEC instead. Right now the adoption is slow, but things are speeding up. With DNSSEC you would be able to authenticate that you are indeed getting the proper DNS reponse from your name servers. Combine that with SSL and you could be pretty sure that you are indeed talking to the right Google. Now we just need some form of fingerprinting like SSH has.