News for hackers. Stuff that matters.
Re:Matt Levine makes sense of Wall Street like none other by titanomachy on Friday October 09, 2020 @01:27PM (#24732234)
New to me and I've been programming web for quite a while. I've only ever seen that final "." in DNS records, it never occured to me that it would affect logic within the site.
Re:Matt Levine makes sense of Wall Street like none other by sk5t on Friday October 09, 2020 @02:09PM (#24732678)
The trailing "." becomes practically important if you have a client that believes in DNS search suffixes (yuck!). I imagine it might have some effect in this particular case if the user-agent includes the dot in the "Host" HTTP request header and it thus evades some non-canonicalizing layer of Bloomberg's paywall thing, while still being a perfectly okay request to the rest of the chain.
Re:Matt Levine makes sense of Wall Street like none other by smogcutter on Friday October 09, 2020 @01:53PM (#24732515)
You know what’s also missing if you go to bloomberg.com./? All of the ads, and the animated stock ticker. I’m on mobile so didn’t dig into it further, but I bet that all JS loaded on request from another domain (probably including the paywall) is absent or broken.

The site itself loads fine though, because DNS still works and whatever routing layer in their app probably doesn’t care about the domain, just the path that follows it.

Re:Matt Levine makes sense of Wall Street like none other by seppler on Friday October 09, 2020 @05:36PM (#24734685)
I once got a verbal C&D from a Novell web dev because they answered to any domain and I pointed (as a joke) a domain to their IP. Google ended up indexing, and customers were asking what 'reallystrangedomain.com' was when they searched for Novell error messages.

They asked me to stop 'mirroring' their content, and didn't understand I was just pointing my domain to their servers. I stopped, but part of me didn't want to.

Edit: Looks like archive.org picked it up: http://web.archive.org/web/20110623134639/http://thebergenef...

Re:Matt Levine makes sense of Wall Street like none other by iso8859-1 on Friday October 09, 2020 @01:59PM (#24732575)
It shouldn't. It is the fault of hacky protocols like HTTPS that conflate routing with identity. If we had DNSSEC and IPSEC from the beginning, it wouldn't have been necessary to do it on application level.
Re:Matt Levine makes sense of Wall Street like none other by AgentME on Friday October 09, 2020 @03:00PM (#24733213)
The browser's same-origin-policy would still exist the same way without HTTPS.