How a domain registrar can kill your business

Re:How a domain registrar can kill your business by mseebach on Wednesday May 16, 2018 @01:17PM (#17084272)

The problem was the phishing, not the subdomain. If your app allows users to run phishing operations, moving the content from user.foo.com to www.foo.com/user probably won't help much in parent's scenario.

[ Parent | on HN ]

Re:How a domain registrar can kill your business by Boulth on Wednesday May 16, 2018 @02:00PM (#17084769)

But it would help to run user content on user.foo.io just like Github.

[ Parent | on HN ]

Re:How a domain registrar can kill your business by eToThePiIPower on Thursday May 17, 2018 @01:24AM (#17088949)

I have to disagree. A phishing scam from "billing.foo.com" would be much harder to spot than one from "user-content.foo.com/billing". Especially if the user has free reign over the style + content.

If the user is going to be able to design + style the pages any way they want, having something in the URL to indicate it's still user content is important.

[ Parent | on HN ]

Re:How a domain registrar can kill your business by txsh on Wednesday May 16, 2018 @10:45PM (#17088322)

No. The problem is the subdomain. Allowing people to phish on a subdomain is lending the phisher the credibility of legitimate websites hosted on the domain. It’s like lending a thief your uniform so that he can disguise himself as an employee. You’re an accomplice when he uses it to steal.

[ Parent | on HN ]