5 ms·
States usually control a top level domain under .gov (e.g there is labor.ca.gov for California’s department of labor). .us on the other hand is freely availabl
by tuckerman 3y ago
States usually control a top level domain under .gov (e.g there is labor.ca.gov for California’s department of labor).
.us on the other hand is freely available for anyone to use (and in my experience is usually quite cheap)
- Dwedit 3y agoStates being part of .gov is relatively new. There was a very long period where .gov was exclusively for the federal government. The state governments were under the domain (abbreviation of state).us, and everything was a subdomain of that.
- wavemode 3y agoyeah I still remember my grade school website's domain ended in ".k12.<state abbrev>.us" Seems ripe for abuse if such registrations aren't being securely controlled
- NoZebra120vClip 3y agoBut you don't get it. No registration is necessary. All an attacker needs is access to the authoritative DNS servers. They can get a delegation or insert their own resource records. Why go through a registry and give up a credit card and personal details?
- anamexis 3y agoI think they're referring to <state>.us registrations
- tuckerman 3y agoI think at this point it’s been allowed for over 20 years but I’m sure there is a mixture still. I was mostly trying to point out that registering under .us is pretty trivial. There is no need to try and sneak something into some states’s dns records, anyone can just go on any registrar and purchase something directly under .us
- ciabattabread 3y agoNew York City, a municipal government, used to have its website at www.ci.nyc.ny.us, now it’s at nyc.gov. But NYC still has a bunch of active websites hosted at *.nyc.ny.us.
- kube-system 3y agoNYC also has a TLD of their own. e.g: https://www.archives.nyc/ https://www.archives.nyc/
- davchana 3y agoThat's privately controlled, not like .gov. But yes.