News for hackers. Stuff that matters.

A comment on Blizzard games were vulnerable to DNS rebinding attack. Parent comment

Re:Blizzard games were vulnerable to DNS rebinding attack by michaelermer on Monday January 22, 2018 @07:03PM (#16209453)
I call BS, it's the responsibility of the server to check Host headers and implement CORS. All browser provide these security measurements. There are valid use cases for having domain aliases for local ips.
[ Parent | on HN ]
Re:Blizzard games were vulnerable to DNS rebinding attack by benchaney on Monday January 22, 2018 @07:19PM (#16209570)
> There are valid use cases for having domain aliases for local ips.

My preferred solution doesn't prevent this, and in fact it is preferred partially because some of the other solutions do.

[ Parent | on HN ]