Search /
Docfinder:
Advanced search  |  Help  |  Site map
RESEARCH CENTERS
SITE RESOURCES
Click for Layer 8! No, really, click NOW!
Networking for Small Business
TODAY'S NEWS
Microsoft details Windows 8 for ARM devices
Web app lets enterprise set security, sharing for Google Apps users
Cloudscaling to offer OpenStack private cloud platform
Valentine's Day Patch Tuesday: Microsoft to issue 9 patches, 4 critical
Mobile World Congress sneak peek: Quad-core smartphones, Ice Cream Sandwich & more
Microsoft details 'Windows on ARM' program
March debut of 'iPad 3' a sure bet, says analyst
Resume Makeover: How an Information Security Professional Can Target CSO Jobs
FBI unbolts Steve Jobs 1991 investigation file
Cisco boosted profit, sales in Q2 while cutting costs
Macs take on the enterprise
Four crazy tech ideas from Google's Solve for X project
Obama 2012 campaign playlist revealed courtesy of Spotify
Oracle buying Taleo for US$1.9 billion in direct hit at SAP
/

Compendium /

VeriSign, Google and bogus domain names

Related linksToday's breaking news
Send to a friendFeedback


Network World Fusion 09/17/03

Jeremy Zawodny (among others) notes the news that VeriSign has added a wildcard record to its .com and .net zones, which in English means that if you mistype a domain name (or you try one that doesn't exist), instead of getting some error page, you'll get a VeriSign page.

Naturally, this is Evil and Something Must Be Done About It, preferably by switching all your domains to an open-source registrar. Now, as an Internet Explorer user, I'm not sure how, exactly, this is any more Evil than having a Microsoft search page come up when I mistype a URL (although some folks do note issues such as scalability, the impact on bounced e-mail and just the sheer irony of VeriSign basically getting into the same typosquatting as that alleged pornographer down in Florida).

In any case, I noticed something interesting this morning. Curious to see what I would get, I typed in some bogus URLs. Instead of a "page cannot be displayed" error or an MSN search page, I got:

A Google search page!

Telling me that the URL in question could not be found. I have the Google searchbar installed. So what's the deal with that? When I tried similar non-existent domains in (searchbar-less) Firebird and Lynx, I got simple error messages telling me those browsers couldn't connect to the site in question.

Update Zawodny checks in (see the comments) to say why this is more than just a browser issue - basically, it affects the whole architecture of the Internet, which, of course, sits atop IP numbers and DNS. Meanwhile, Wired reports the Internet Software Consortium has rushed out an anti-VeriSign patch (get the patch here), in part because the new practice means enterprises and ISPs could be flooded with more spam, since all those formerly unresolvable domain names in spam headers now suddenly do resolve - to VeriSign.

Back to Compendium

Comments

The evilness has little to do with browsers and everything to do with changing the network works in a very fundamental.

Can you ping some host? Well, yeah. Even if you spell it wrong.

Good luck troubleshooting problems now...

Posted by: Jeremy Zawodny on September 17, 2003 03:43 PM

Under ordinary circumstances, I believe that the setting "Show friendly HTTP error messages" on the Advanced tab in the Internet Options dialog determines whether or not you get the MSN search page rather than the usual error message. I have the Google toolbar and I still get the MSN search, although inconsistently. Sometimes I'm getting the Verisign page. I have a feeling that Verisign's server is overloaded, and if it fails to respond IE is falling back to the MSN page.

Perhaps it isn't the toolbar that is directing you to Google. I'm hearing that some sysadmins are taking steps to stop Verisign, so perhaps someone has rigged your DNS server to send you to Google instead of to Verisign.

-rich

Posted by: Richard Schwartz on September 17, 2003 08:45 PM

Post a comment

Name:


E-mail address:


URL:


Comments:


Remember info?




NWFusion offers more than 40 FREE technology-specific email newsletters in key network technology areas such as NSM, VPNs, Convergence, Security and more.
Click here to sign up!
New Event - WANs: Optimizing Your Network Now.
Hear from the experts about the innovations that are already starting to shake up the WAN world. Free Network World Technology Tour and Expo in Dallas, San Francisco, Washington DC, and New York.
Attend FREE
Your FREE Network World subscription will also include breaking news and information on wireless, storage, infrastructure, carriers and SPs, enterprise applications, videoconferencing, plus product reviews, technology insiders, management surveys and technology updates - GET IT NOW.