Microsoft Resolves Documentation Vulnerability with Domain Purchase
Summary
This sale resolves an important security concern caused by many IT professionals following default configuration guidelines a bit too closely. Specifically, if the previous owner of corp.com wanted to be malicious, they could set up a server and listen for these errant connections then attempt to steal information ranging from authentication details to file uploads. Administrators should make sure they carefully choose their domain names when setting up a new Active Directory or LDAP environment. The Internet Assigned Numbers Authority (IANA) governs domain name usage and specifically reserves “example.com”, “example.org” and “.example” for use in documentation. Sysadmins should not, of course, use these example names in their production setups, but at least in the event someone uses the reserved example domains they won’t resolve to an unknown party.
Classifications
AskAI Classifications
LabelsLinked Companies
