3 ms·
My comment was regarding DNS records, since this subthread switched to talking about DNS 2 comments up: > Many (most?) registrars add DNS you didn't explicitly
by beeboobaa3 2y ago
My comment was regarding DNS records, since this subthread switched to talking about DNS 2 comments up:
> Many (most?) registrars add DNS you didn't explicitly ask for
This relates to TLS since DNS records can be used to request a TLS certificate, but yes, those show in the certificate transparency log, so that you can check. But it won't tell you about other DNS records that may be used for various other purposes.
- 8organicbits 2y agoDid you have any purposes in mind? An A record for the apex of the domain would be easy to find with dig or any other DNS client. I agree with the hypothetical though, your DNS provider can set records that you didn't request, could hide them in the console, and detecting these would be hard in the general case.
- beeboobaa3 2y agoNot really, the point is more that you wouldn't easily find out if they did that.