官方的 MASTR 标志 MASTR 支持这项工作
目录
← 知识库首页

Web 基础

DNS: the name is part of the security boundary

A familiar domain must still resolve to the intended service.

Web2 foundation · 1 min read

研究文章和参考条目以英语发布。导航提供七种语言。

Original MASTR posts on X

本文目录
  1. Names and destinations
  2. Read the full domain
  3. 来源与原始文件

Names and destinations

DNS translates domain names into information needed to locate services. Your browser does not find a server merely by recognising a familiar logo. It relies on name resolution as part of reaching the destination.

Control of a domain's configuration is consequently valuable. A project can retain control of its onchain contract while losing control of the website through which users normally reach it. This is one reason a smart-contract audit cannot cover the entire experience.

Read the full domain

A brand word in a subdomain does not make the site belong to that brand. In an illustrative address such as brand.account.example, the familiar word appears beneath a different controlling domain. Similar spelling creates another source of mistakes.

Use an independently established address for sensitive account access, particularly when an unsolicited message creates urgency. Record the exact URL in an investigation rather than writing only the project name. A later reader needs to distinguish the official service, a compromised page and an imitation. Continue with TLS and support impersonation.

来源与原始文件

相关阅读

MASTR

支持独立研究

这里的调查、原始证据和指南均可免费阅读。自愿捐赠帮助支付研究成本,让 MASTR 能够继续提供工具。

打开钱包