2024-05-02 19:13 UTC
Replies (6)
-
@grumpasaurus@fosstodon.org 2024-05-02 19:25
@briankrebs@infosec.exchange name one representative that you're confident you'd be able to pitch this to
-
@FritzAdalis@infosec.exchange 2024-05-02 19:36
@briankrebs@infosec.exchange No, make them use .gov for their gov operations. Or something restricted like edu.
-
@the_afflicted11@ioc.exchange 2024-05-02 20:01
@briankrebs@infosec.exchange It really should. This is how most scams in third world countries start. 'SMSes like Click on this link to pay your tax/insurance, and the link is of some xyz@shop xyz@corner xyz@taxoffice site.' Make it a law sooooon, Like before some foreign lobby gets to the GOP wingnuts.
-
@jtk@infosec.exchange 2024-05-02 20:23
@briankrebs@infosec.exchange I assume you're half-joking. But in case not, this will never happen. While those three registry operations are all US-controlled companies, two of which being Verisign, there are numerous registrars for those TLDs located all over the world. Do you also stipulate US-only registrars too? Which ones if so? Then what about all the other TLDs that are effectively in US control? Any of those OK? Why or why not? How does this square with all the other goods that may not be entirely US-sourced? Placing a name under a certain TLD has potential consequences, and some are potentially problematic, but it may be a lot more complicated than that.
-
@dango_@mas.to 2024-05-02 20:39
@briankrebs@infosec.exchange I can see it now, generic system services company has to buy .us, .ie, .uk, .es, .ca, .de, .fr, etc, and use the correct domain for each country. (.com is also banned in the EU for being under US control)
-
@Oggie@woof.group 2024-05-02 20:49
@briankrebs@infosec.exchange The nontrivial factor which I know you're aware of but should really be mentioned, is link rot. Sure, it's not a problem....right now. But in 5 years, if that company goes under and another one moves in, even with 3 years time warning ahead, some random person finds an old document via a search engine that talks about this URL. If it's a .gov address, no prob, 301. But what if it's a domain you just...don't control anymore?