Olympus-OM
[Top] [All Lists]

Re: [OM] [OT] Is this a spoof

Subject: Re: [OM] [OT] Is this a spoof
From: "Carlos J. Santisteban" <zuiko21@xxxxxxxxx>
Date: Sun, 26 Jul 2009 18:56:05 +0200
Hi Chuck, Michael and all,


> From: Michael Collins <MRC.OlympusList@xxxxxxxxxxxxxxx>
> On 7/23/09 6:05 AM, Chuck Norcutt wrote:
> > ...any reference to anything as a valid prefix for "www".
>
> In fact "www" is just a convention to indicate a Web server hostname rather
> than some other type of server; it's in no way a requirement or part of a
> formal specification.


That's right, there's no need to have "www" in the URL -- my own domain (
cjss.sytes.net) doesn't even have it!

Now, talking about spoofs... I think it's never a bad idea to remind how to
detect some classic spoofs: the important thing is to check the END of the
domain name, that is, the .com / .net / .org / .co.uk [or whatever] part --
what we IT people call "top level domain". It MUST be followed by a
'forward' slash IMMEDIATELY*

OTOH, if we see (imaginary example) something like:

https://www.paypal.com@xxxxxxxxxxxxxxxxx/ [...]

(Note the '@' inside) it MAY look like a legit URL, but in no way! It will
go to a server named "cgi-bin.webscr.ru" -- the "www.paypal.com" part will
be ignored, treated just as an "username". That's a real scam!

*) The only exception to this rule is that we may find the "port" between
the domain name and the slash -- that's a colon followed by a number, most
likely 80 or 8080, like this:

https://www.paypal.com:8080/cgi-bin [...]

Cheers,
-- 
Carlos J. Santisteban Salinas
IES Turaniana (Roquetas de Mar, Almeria)
<http://cjss.sytes.net/>
-- 
_________________________________________________________________
Options: http://lists.thomasclausen.net/mailman/listinfo/olympus
Archives: http://lists.thomasclausen.net/mailman/private/olympus/
Themed Olympus Photo Exhibition: http://www.tope.nl/

<Prev in Thread] Current Thread [Next in Thread>
Sponsored by Tako
Impressum | Datenschutz