Educause Security Discussion mailing list archives

Re: DNS "A Name" Records for Third Party Providers


From: "HALL, NATHANIEL D." <halln () OTC EDU>
Date: Mon, 12 Jan 2009 12:28:58 -0600

What about having a page with a URL that matches your institutions address (thirdparty.ohio.edu) and displays a page 
stating they are leaving your site and you are not responsible for anything that happens on the third-party site?  Then 
there is a "seamless" URL and you give users a fair warning that they are no longer accessing your system.

--
Nathaniel Hall, GSEC GCFW GCIA GCIH GCFA
Network Security System Administrator
OTC Computer Networking

Office: (417) 447-7535


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew 
Dalton
Sent: Monday, January 12, 2009 9:46 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] DNS "A Name" Records for Third Party Providers

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

We recently had a request for an "A name" record by a third party
provider that is looking for a "seamless" user experience.  We're a
little hesitant to give an ohio.edu name to an external party, and
wanted to find out about other user's experience.  Any caveats, lessons
learned, or experiences that we should watch out for?  Thanks!

- --
Matthew Dalton
Director of Information Security
Office of Information Technology
HDL Center 173G
Phone: 740-597-1914
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAklrZagACgkQVKUofGqW+tysWACgvJqmVX0/hVmTHHPS3BqcRoCW
QskAmgPJj7UV6nPRifeeRQh6hId/xR1H
=0lI6
-----END PGP SIGNATURE-----

Current thread: