Verisign

CTho9305

Elite Member
Jul 26, 2000
9,214
1
81
Those of you who keep up with the latest tech news know that Verisign has decided all invalid domain requests should be redirected to its servers (e.g. http://dhoafhasdlvnay74w5ta4wgy5an5yqa4.com) to present advertising. This makes a lot of network troubleshooting more difficult for everyone, and is a blatant abuse of their position. I sent them this email, and maybe if they get a few thousand more, they'll get the hint.
To : sitefinder@verisign-grs.com

Hi,

I find the terms of use located (http://sitefinder.verisign.com/terms.jsp)
unacceptable. Please stop redirecting me to your website when I mistype
domain names.

Thank you.
 

adlep

Diamond Member
Mar 25, 2001
5,287
6
81
This same happened to me....
:Q
I panicked; thought that my PC got infected with a spyware (I hate spyware)
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
I believe you, but where are you seeing this? IE (all I bothered to test with) is happily refering me to the MSN unknown domain page not a verisign one...
Bill
 

ProviaFan

Lifer
Mar 17, 2001
14,993
1
0
Originally posted by: bsobel
I believe you, but where are you seeing this? IE (all I bothered to test with) is happily refering me to the MSN unknown domain page not a verisign one...
Bill
You'd see it in a browser that actually displays proper and useful error messages. ;)
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Originally posted by: jliechty
Originally posted by: bsobel
I believe you, but where are you seeing this? IE (all I bothered to test with) is happily refering me to the MSN unknown domain page not a verisign one...
Bill
You'd see it in a browser that actually displays proper and useful error messages. ;)

Well, since IE can detect the situation and refer me to a page it kinda cuts into CTho9305's argument that all invalid domains go to Verisign and this is a troubleshooting issue. As long as I get a valid error code to test against....


Bill
 

CTho9305

Elite Member
Jul 26, 2000
9,214
1
81
Originally posted by: bsobel
Originally posted by: jliechty
Originally posted by: bsobel
I believe you, but where are you seeing this? IE (all I bothered to test with) is happily refering me to the MSN unknown domain page not a verisign one...
Bill
You'd see it in a browser that actually displays proper and useful error messages. ;)

Well, since IE can detect the situation and refer me to a page it kinda cuts into CTho9305's argument that all invalid domains go to Verisign and this is a troubleshooting issue. As long as I get a valid error code to test against....


Bill

only in IE. network tools will end up resolving invalid stuff to actual IPs. not good.
 

ProviaFan

Lifer
Mar 17, 2001
14,993
1
0
Microsoft worshippers will say anything, whether it makes more sense or less, as long as it makes a cheap shot at an open source project or advocate.
rolleye.gif
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
only in IE. network tools will end up resolving invalid stuff to actual IPs. not good.

How (I'm trying to understand what IE is seeing that it can trigger off of that the network tools can't)

Microsoft worshippers will say anything, whether it makes more sense or less, as long as it makes a cheap shot at an open source project or advocate.

Verisign is open source? I'm just trying to better understand what they did and why the change didn't affect IE (if they generically did something you'd think it would affect IE also). I'm just torn on how bad this actually is. MS added this functionality (and people complained about it then) but you can argue (not saying I will, but you can) that it's an ease of use issue that helps novice users (of course with IE already doing it, the extra benefit of Verisign doing it also to catch non IE users is questionable).

Bill

p.s. jliechty, suppose we can keep this a discussion and not immediately start flaming everyone?


 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Ok, played some more, see what your seeing now (they are sending back some records for just about everything). Does look like a local dns configuration option/choice (e.g. the bind patch to disable it), but I wonder if many ISP's will. Curiously they don't seem to be currently dishing anything up on 80 right now (can't telnet or point a broswer at it even tho they are resolving just about anything). Is it still working for you right now, what do you get if you telnet to them and try just dong a get / ?

Bill
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
This was an good point from the article "Vixie said a lot of spam spoofs the "from" domain, and that many ISP-level spam filters check whether incoming e-mail is from a valid domain or not. Instead of generating errors, the spam filter checks are instead being rerouted to the Site Finder service, and therefore appear to originate from a legitimate domain. " So, CTho9305, consider me fully onboard and annoyed with Verisign also ;)

Bill