Full Disclosure mailing list archives
Re: VeriSign's fake SMTP server for SiteFinder
From: Pamela Patterson <ppatters () cbnco com>
Date: 22 Sep 2003 16:26:02 -0400
On Mon, 2003-09-22 at 15:13, Richard M. Smith wrote: <snip>
I've attached an early email from Verisign that gives a bit more information about how this fake SMTP server operates but not why it is needed.
If they had no mail server there at all, mail sent to non-existent domains would sit in limbo as the upstream machine tried to deliver it to the Verisign machine. How many times it would try and how long it would wait would depend on the MTA configuration, but it could be days. If email sent to misspelled domains took 5 days (the sendmail default) to bounce due to Verisign's domain squatting, people would be very upset -- There are two kinds of sysadmins: paranoids and losers. I'm both kinds. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- VeriSign's fake SMTP server for SiteFinder Richard M. Smith (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Pamela Patterson (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Brent J. Nordquist (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Michal Zalewski (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Damian Gerow (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder fulldisclosure (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Dan Rowles (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Jonathan A. Zdziarski (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Joshua Levitsky (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Valdis . Kletnieks (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Jonathan A. Zdziarski (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Nate Hill (Sep 22)
- <Possible follow-ups>
- RE: VeriSign's fake SMTP server for SiteFinder Joshua Thomas (Sep 22)
(Thread continues...)