Full Disclosure mailing list archives

Re: VeriSign's fake SMTP server for SiteFinder


From: Pamela Patterson <ppatters () cbnco com>
Date: 22 Sep 2003 16:26:02 -0400

On Mon, 2003-09-22 at 15:13, Richard M. Smith wrote:
<snip>
I've attached an early email from Verisign that gives a bit more
information about how this fake SMTP server operates but not why it is
needed.

If they had no mail server there at all, mail sent to non-existent
domains would sit in limbo as the upstream machine tried to deliver it
to the Verisign machine.  How many times it would try and how long it
would wait would depend on the MTA configuration, but it could be days. 
If email sent to misspelled domains took 5 days (the sendmail default)
to bounce due to Verisign's domain squatting, people would be very upset

-- 
There are two kinds of sysadmins: paranoids and losers.
I'm both kinds.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: