On 6/4/2012 12:11 PM, Boris Zbarsky wrote:
On 6/4/12 2:10 PM, John Nagle wrote:
Is DNS always preferred over search?

At the moment, yes. Otherwise lots of intranet stuff that uses search
domains would fail too.

    OK, that's good enough for now.

    The main change is that, for today's TLDs, few bare TLDs resolve
to an IP address.  Corporate TLDs ("facebook", "pepsi", etc.)
probably will resolve to an IP address.

Does this introduce any security risks?

Could be.

    I can see problems appearing with firewalls, caching servers,
and other stuff in the middle with too much state.  But that's
not the browser's problem.

                                John Nagle


_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to