In Defense of the .zip TLD(luke.zip)
luke.zip
In Defense of the .zip TLD
https://luke.zip/posts/zip-defense/
5 comments
> you try to tell your friend “hey I sent weddingpictures.zip to your email” and your friend clicks the resulting link, thereby being redirected to a trick site that steals your SSN.
Information theft seems possible, SSN less so, but I was more concerned about downloads.
Clicking on an auto-linkified weddingpictures.zip could autodownload a zip file containing malware. You may trust your friend but the zip file is not from them.
I think the lack of auto-linkification has a lot to due with why we aren't seeing real phishing attacks using the ZIP TLD. So I feel like we warned, the industry reacted by not autolinkifying, and disaster was averted.
Information theft seems possible, SSN less so, but I was more concerned about downloads.
Clicking on an auto-linkified weddingpictures.zip could autodownload a zip file containing malware. You may trust your friend but the zip file is not from them.
I think the lack of auto-linkification has a lot to due with why we aren't seeing real phishing attacks using the ZIP TLD. So I feel like we warned, the industry reacted by not autolinkifying, and disaster was averted.
Luke defends all the problems with .zip but doesn't present a case why .zip is good.
I'm okay with it being neutral, neither good nor bad.
Raymond Chen says that every feature starts at -100 points.
However I would read luke's articles anytime, no matter the tld.