News for hackers. Stuff that matters.

A comment on Buying a single character domain – and 3 character FQDN – for £15. Parent comment

Re:Buying a single character domain – and 3 character FQDN –... by fireattack on Saturday August 15, 2020 @12:57PM (#24170304)
I don't get it then.

Since browser already turns it into ascii format before resolving, how would it work in XSS for server-side max length limitation as he mentioned in his other article, "Minimum Viable XSS" [1]?

[1] https://shkspr.mobi/blog/2016/03/minimum-viable-xss/

[ Parent | on HN ]
Re:Buying a single character domain – and 3 character FQDN –... by jrochkind1 on Sunday August 16, 2020 @11:02AM (#24178359)
Yeah, I don't really get that either; I don't understand the value of these denormalizing domain names to XSS.
[ Parent | on HN ]