3 ms·
Yeah. To be honest, I kind of setup this blog as a joke when the dot zip gTLD came up, as an inside joke with a few fellow security people who (rightfully) are
by gepeto42 2y ago
Yeah. To be honest, I kind of setup this blog as a joke when the dot zip gTLD came up, as an inside joke with a few fellow security people who (rightfully) are against the ever expanding list of TLDs we have to deal with.
- Mystery-Machine 2y agoWhat's wrong with ever expanding list of TLDs? Is there a security threat or you just don't like it or?
- gepeto42 2y agoSome of them make it way easier for threat actors to obtain large amounts of domains for cheap or free, without fear they'll disappear right away. Paul Vixie had a great talk and research about this ~2018: https://www.youtube.com/watch?v=nkoNjntc5Lw https://www.youtube.com/watch?v=nkoNjntc5Lw
- billpg 2y agoBecause of the risk of auto-linkification, I'm of the opinion that browsers should put the entire dot-zip domain into the this-is-dangerous realm with big scary warnings if anyone follows a link. (Or at least any file downloads.)