2 ms·
The article is about typo-squatting, there is nothing preventing someone from squatting postgress.org. Also domain registration expires, and allowing someone to
by remram 3y ago
The article is about typo-squatting, there is nothing preventing someone from squatting postgress.org. Also domain registration expires, and allowing someone to take over leftpad.net because the previous volunteer maintainer didn't pay a yearly fee is an anti-feature.
I'm only talking about domain ownership here because I don't understand how this scheme could benefit from TLS certificates. Anybody can get a certificate if they control the domain anyway.
- yencabulator 3y ago1) Typosquatting DNS adds cost (it's harder to spam the namespace), and it forces the attacker to put down a credit card. 2) Go-style import URLs prevent you from typosquatting a large part of the path. On `example.com/hrd2spll` you can't typosquat the latter part (which would be easier to attack), only the hostname.
- vladvasiliu 3y ago> 1) Typosquatting DNS adds cost (it's harder to spam the namespace), and it forces the attacker to put down a credit card. It also raises the bar of who will publish things. I have a few random projects on github that some people seem to use. I wouldn't pay for a domain name to publish those.
- yencabulator 3y agogithub.com/vladvasiliu/foo works fine, if that's what you want.