A domain name is an identification string that defines a realm of administrative autonomy, authority, or control on the Internet. Domain names are formed by the rules and procedures of the Domain Name System (DNS). Technically, any name registered in the DNS is a domain name.

learn more… | top users | synonyms

16
votes
3answers
2k views

Why do HTTPS requests include the host name in clear text?

I'm having a little bit of trouble understanding why the HTTPS protocol includes the host name in plain text. I have read that the host name and IP addresses of an HTTPS packet are not encrypted. Why ...
2
votes
1answer
36 views

DNS Rebinding attack - does this attack require victim to use an attacker's DNS server for resolution? How will that happen?

Usually a preferred DNS server will be set in router's configuration and it will be either the organization's server or some trusted public server. So how would attacker get the victim to use his DNS ...
0
votes
0answers
13 views

What jurisdiction do DNS root servers and corresponding TLDs have?

We are setting up DNSSec and want to document risks that relate to the core root servers, their binding keys, and the next level DNS TLD. Since there is history saying that the US Government owns ...
1
vote
2answers
641 views

How can I stop someone to display my website with his domain?

I just discovered on a website that someone is pointing a DNS on the server I use for a website, and by this mean, is displaying the website of "my" server. How can I stop this unlegitimate use of ...
6
votes
3answers
230 views

Does domain privacy make a domain less secure?

Does buying domain privacy make the domain more secure against hijacking? Would it make the domain less secure against losing it, if the registar gets bankrupt? I am afraid that the domain could be ...
0
votes
1answer
33 views

Security risks of allowing customer to use his own domain for a hosted SaaS application

As a SaaS hosting, we are considering allowing customer to use an alternative domain to access his SaaS environment. Default domain owned and hosted by us: customersubdomain.ourdomain.com ...
0
votes
2answers
55 views

Unpublished server

Is it possible to setup my web server such that only certain sources can access and the public from internet has no access? i am thinking that we could just not publish our web server URL/IP to our ...
2
votes
3answers
176 views

Strange unsolicited email sent to almost never used email address

What initially looked like typical spam now seems extra odd and is bugging me (only figuratively I hope). Ostensibly, a sales rep from DomainNameSales.com (DNS), which I'd never heard of, sent an ...
-2
votes
1answer
22 views

Usage of Domain from one server to another [closed]

Just want to ask if anyone have an idea about how to do this. I'm using a domain lets call it mymaindomain.com to connect to my Main Server, now I have a second Server that uses mysecondomain.com Is ...
-4
votes
1answer
86 views

How to know from where the website is being operated? [closed]

I mean one can find their host server (from which the domain name is bought), but can we check who bought the domain and from where is that website is being hosted?
1
vote
1answer
235 views

Using cookies for cross domain authentication

I have an web app 1 which would do the authentication of the user. After that I want to forward the request to another web app 2. Now web app 1 will generate some hashcode which I can authenticate in ...
1
vote
1answer
79 views

Force DNS to attach bad IP address

The question is not professional, but what I'm trying to say is... Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache ...
0
votes
1answer
123 views

Are these port secured on my AP?

I'm doing a project for my high-school and I'm trying to get the best security for my network. I've made almost everything in my access-point configuration and I have only 3 tcp/ports open on my AP: ...
3
votes
2answers
174 views

Is it safe to point a (sub)domain to my home IP address?

I have my own website and I created a subdomain that points to my home IP address. It is useful for personal things like entering my domain for wake-on-lan and letting my friends enter it to join ...
0
votes
2answers
654 views

How could you find wildcard subdomains on websites?

Other than testing different URLs separately, is there anyway to find out if a website has a wildcard sub domain?
2
votes
3answers
172 views

Domain Name Thefts

Due to past experiences, I have learned that when I'm contemplating purchasing a suitable domain name, I should NOT do so by searching on the websites of domain registrars (GoDaddy, name.com, etc.). ...
3
votes
1answer
68 views

Email, Certificates and DANE [closed]

Does DANE offer the ability to provide certificates for services? Or is it just hosts? How does one specify a mail server with DANE? If my email is jd@foo.com but mail.bar.com is the email server, ...
1
vote
1answer
178 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] ...
1
vote
3answers
171 views

How Can Cybersquatters Afford the Renewal Fees? [closed]

Cybersquatters register so many domains and sit on them for so long that the renewal fees alone would bankrupt anyone. Do they have some kind of special status that lets them pay very low renewal ...
1
vote
5answers
172 views

How do big companies ensure that other people don't register a new top level domain with their name?

For example today there are ".codes", ".farm" and ".vaijes" newly available. How do big companies like google, facebook, twitter, .. keep sure that they are the first who register their name on the ...
2
votes
1answer
103 views

Which information does a whois lookup reveal about the registrant of the domain?

A friend of mine recently got her Gmail account "hacked" because of a weak password (the same as her login..). While sanitizing her account, I removed the forwarding of her emails to one email ...
1
vote
2answers
155 views

Is it reasonable to keep control panel in separate subdomain or domain?

Since I'm quite beginner to information and websites security, I'd like to ask more experienced people about and idea, that just crossed my mind (probably isn't my original discovery! :]). With ...
14
votes
2answers
655 views

How can I prevent that my users get a certificate issued for my domain on my behalf?

I have a domain, where some other users have access to upload files, use email, use XMPP, etc. How can I prevent that these users go to a certificate authority and get a certificate for my domain? ...
2
votes
2answers
178 views

How to find out the email host of a vanity email address?

Assuming a person gets his own domain address, say, theperson.com. He then goes on to create a vanity email address with that domain. e.g. me@theperson.com. me@theperson.com may be hosted by the ...
1
vote
2answers
85 views

Mechanisms to offer inexpensive https to all second level .wiki domains

I'm working with the registry for .wiki, a new generic top level domain set for public availability in June 2014. We're going to be giving away hosted wikis to registrants of .wiki domains and I'd ...
0
votes
2answers
241 views

Subdomain-only SSL security/availability

CAcert and StartSSL both only validate domains whose TLD is owned by the requester. I have a few subdomains that come from places like freeDNS that I would like to run an SSL-secured server on. Are ...
1
vote
3answers
478 views

Can my customer's ISP trace who visited my business website?

I own a private business and a web site with a domain name hosted with Godaddy US. I live in Europe. I want to know if the various ISP of my customers in my country can find out who visited my web ...
2
votes
2answers
46 views

DNS Domain Issue [closed]

we are maintaining our DNS account to GODaddy DNS Provider for our servers, Right now we have an problem, If some one have to register domain or sub-domain from any of other dns provider or godaddy ...
1
vote
1answer
193 views

SSL on domain will affect un-secured sub-domain

I have a plan to buy a SSL certificate for my domain. I don't have much budget so I decided to buy standard SSL with no support for sub-domains. I have a WCF web-service that works on sub-domain. This ...
1
vote
1answer
87 views

DNS Redelegation - Security Risk?

I am a web developer and I use Adobe Business Catalyst. To use some of their services it is recommended you redelegate the domain. In other words change the nameservers to Business Catalyst. I have ...
1
vote
2answers
154 views

SSL-certificates for overlapping domain regions?

Suppose, a server hosts https://www.master.com/ and thus is equipped with a (single domain) SSL certificate. Furthermore, suppose there are some web apps below master.com: ...
3
votes
1answer
3k views

A “new domain registration” spam?

About 6 days ago I purchased a new domain under .org TLD from a local registrar. Few days later, I have received this strange message (which BTW fell to Gmail spam bin), which looks like some kind of ...
-3
votes
2answers
6k views

Why is secureserver.net (GoDaddy) showing up blacklisted from my domain blacklist checker thingy? [closed]

I have my business website through GoDaddy and there has been some weird stuff happening within my business over the past year costing me a lot of money and all of my free time trying to figure out ...
1
vote
3answers
123 views

Are different top level domains somehow different security wise?

If so why is the difference? I've tried to google it but nothing relevant was found.
9
votes
4answers
494 views

How to stop/detect someone else registering a certificate for my domain

With the proliferation of low-cost automated CAs what can be done to mitigate the attack of someone doing a spear phishing attack to get a login to our webmail system, then using an automated service ...
-1
votes
1answer
656 views

Routable Domain for DC?

What is the impact of having a routable domain name in windows network infrastucture ? Having example.com in place of exemple.local as domain name have an critical impact ? if yes what should I keep ...
15
votes
6answers
5k views

Is showing your IP address in the URL a bad practice?

Someone told me that showing your IP address in a URL (like hxxp://45.67.134.34/default.html) is easier to hack. Is that true? I could trace any domain name and get its IP number as well.
40
votes
4answers
6k views

Is publishing your public IP address a security threat?

I work for a large-ish company (thousands of employees across multiple locations). I recently needed to know what the possible public IP addresses are, so that a vendor could identify us (presumably ...
14
votes
5answers
16k views

How can I find subdomains of a site?

One of the things I need to do from time to time is to find subdomains of a site for example. Starting with example.com sub1.example.com other.example.com another.example.com I'm ...
3
votes
2answers
548 views

How can I protect my domain names without exposing too much personal information?

I guess more specifically I want to know how to ensure I retain ownership by having sufficient contact information in the Administrative, Technical and Billing contact fields, but without exposing too ...
23
votes
3answers
896 views

What are some risks of purchasing a “used” domain name

If you purchase an existing domain name that was already used by someone else what are the ways in which the domain could have been broken by the previous owner? Are such problems common and are there ...
4
votes
3answers
826 views

How do you verify a certificate belongs to a domain?

I'm using PHP and trying to verify a SSL certificate belongs to the SMTP domain/IP I'm connecting to. Currently I can verify the certificate is valid using the following code $resource = fsockopen( ...
14
votes
3answers
241 views

Domain name expiration and TLS

If I purchase a domain name that has expired, do I have any assurance that the previous owner does not have a valid HTTPS certificate for the site? In other words, do CAs check domain name expiration ...
10
votes
1answer
399 views

Why can the validity of an SSL certificate exceed the registration period of a domain?

I can understand why one might desire to purchase a certificate for multiple years but I am left wondering why it appears to be possible to obtain a valid certificate for a domain that may have come ...
26
votes
3answers
13k views

How do hacking groups register domains remaining anonymous?

Let's take lulzsec as an example; they registered lulzsecurity.com. There are two problems that I don't understand how they solved: They had to pay for it. Tracking down money is generally much ...
2
votes
2answers
187 views

Domain and IP scoring

What kind of things would you check in a domain and IP scoring system? Which things are the most important? If I have a web site or web service, I would like to figure out a score for my visitor. If ...
3
votes
2answers
1k views

Keeping Whois domain registration details private

Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
3
votes
1answer
206 views

How to protect against exploitation of email addresses from an mistakenly expired domain?

I have a domain name that I have registered for a long time. Due to a combination of bad luck and oversight, the domain name expired and was rebought by somebody else. I am attempting to buy the ...
7
votes
3answers
3k views

If someone bought the .local TLD could that be a security risk?

Now that the ICANN is allowing custom Top Level Domain names and often corporate IT workers like to use .local as the TLD for internal networks, if someone does buy the .local TLD what are some ...
7
votes
1answer
211 views

Does dnssec protect against malicious registrars?

With the recent conspiracy theories around the registrar MarkMonitor Inc., the question arises, if DNSSEC protects against a registrar going malicious (or being attacked). This is especially ...