3 ms·
I know what the X-Forwarded-For is, but I'm confused by what you mean here. Can you go into a bit more detail as to what you implemented and how it prevents phi
by apitman 3y ago
I know what the X-Forwarded-For is, but I'm confused by what you mean here. Can you go into a bit more detail as to what you implemented and how it prevents phishing?
- aussieguy1234 3y agoIt's a header that contains the IP address of the machine that ran the Tunnelmole client, which ensures it can't be used anonymously. My theory here is that phishers and other nefarious actors are attracted to this type of service so they can hide their origin server. I haven't had alot of phishing issues since introducing that header and the IP address in random domains. I'll see if I can get tunnelmole.net added to that public suffix list. One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain.
- apitman 3y agoInteresting. I see what you mean by the random domains now. Creative idea! > One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain. Definitely recommend you keep it that way. There's not saying what various orgs will do. I believe at one point Facebook messenger blocked links to .xyz TLD domains entirely. Maybe they still do.