zevlag·昨年·議論> Subdomains can be passwords and a well crafted subdomain should not leak,I disagree. A subdomain is not secret in any way. There are many ways in which it is transmitted unencrypted. A couple:- DNS resolution, multiple resolvers and authoritative servers - TLS SNI - HTTP Host HeaderThere are many middle boxes that could perform safety checks on behalf of the client, and drop it into a list to be rescanned.- Virus Scanners - Firewalls - Proxies
zevlag·4 年前·議論Here is the archive.org link now that the original link is 404'ing.https://web.archive.org/web/20221208070504/https://margin.re...
zevlag·4 年前·議論It started out really simple, and good. Then as google added other features, new products, acquired companies, it's gotten harder and harder.
zevlag·4 年前·議論The problem I have with iCloud+ is that it is tied to family group, and my own nuclear family is 7. Let alone all the extended family using my domain.
I disagree. A subdomain is not secret in any way. There are many ways in which it is transmitted unencrypted. A couple:
- DNS resolution, multiple resolvers and authoritative servers - TLS SNI - HTTP Host Header
There are many middle boxes that could perform safety checks on behalf of the client, and drop it into a list to be rescanned.
- Virus Scanners - Firewalls - Proxies