We have a request for a vhost (reverse DNS) suspiciously similar to an existing website.
I'm not sure we should do that. What do you think we should accept/deny for vhosts?
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Wontfix | dereckson | T980 Set 2001:470:1f13:896::15 to server7.radarbolmong.com for Eglide | |||
| Resolved | dereckson | T981 Define a policy for acceptable vhosts on Eglide |
Event Timeline
Comment Actions
Summary of previous discussions
@Sandlayth is out on this issue: they consider we should avoid to be too restrictive, and that's only a vhost, so as long as this is decent, that's appropriate.
@dereckson stresses on phishing risk.
Comment Actions
Declined T980 with this rationale I want to include in our policy:
Uniqueness.
§1. The vhost shouldn't be impersonate any existing name, like the domain of a known website.
§2. Are allowed by exemption to §1:
- clear and immediately recognizable parody