3 ms·
The real solution to WHOIS is RDAP. Unfortunately, it isn't required for ccTlds, and there are plenty of non-ccTlds that aren't working. https://en.wikipedia.
by Fileformat 2y ago
The real solution to WHOIS is RDAP.
Unfortunately, it isn't required for ccTlds, and there are plenty of non-ccTlds that aren't working.
https://en.wikipedia.org/wiki/Registration_Data_Access_Protocol https://en.wikipedia.org/wiki/Registration_Data_Access_Proto...
https://resolve.rs/domains/rdap-missing.html https://resolve.rs/domains/rdap-missing.html
- tucosan 2y agoHow does it mitigate the issues outlined in the article?
- Fileformat 2y agoThe root cause for the PHP vulnerability is trying to parse unstructured text. The actual information in WHOIS has structure: emails, addresses, dates, etc. This info should be provided in a structured format, which is what RDAP defines. IMHO, there is no reason for a registrar to not support RDAP, and to have the RDAP server's address registered with ICANN.