[dns-operations] More detail on the EA/Origin "subdomain hijack"?

Viktor Dukhovni ietf-dane at dukhovni.org
Thu Jun 27 00:11:05 UTC 2019


Anyone have more detail on:

    https://arstechnica.com/information-technology/2019/06/security-firms-demonstrate-subdomain-hijack-exploit-vs-eaorigin/

It seems that it may be possible, with some cloud providers, for a
new customer to request to use the same cloud DNS name as a previous
customer?  If so, why?

-- 
	Viktor.



More information about the dns-operations mailing list