For one, this seriously concerns me. I believe appropriate research should be done and this issue addressed within the scope of the OGB. I know should it be required after investigation (malicious or benign intent on the other party) actions should be taken to either discontinue this content forwarding/filtering or consolidate the name to the OpenSolaris set, or deny them the right to do exactly what is occurring. It is important to me to retain an identity as an organization (OpenSolaris Community).
The correct process to follow in resolution of these scenarios to my knowledge are based on the ICANN Uniform domain-name dispute-resolution policy here (http://www.icann.org/udrp/udrp.htm). I would also suggest any further concerns like this be submitted to the OGB privately as this can be very much security related. Its well outside of a scope we can address in this forum. This is potentially a trademark related situation. --Ron -----Original Message----- From: website-discuss-bounces at opensolaris.org [mailto:[email protected]] On Behalf Of Laurent Blume Sent: Friday, March 14, 2008 12:41 PM To: website-discuss at opensolaris.org Subject: [website-discuss] Who is opensolaris.BIZ? Hello all, I've belatedly noticed that, after following a well-placed Google hit, I had logged in and posted on www.opensolaris.BIZ. Okay, it's the real thing, the owner of the domain points it to the same IP address as www.opensolaris.org. However, this owner is not Sun. And the MX is definitely not the same. BTW, I know the login is secured, and there SHOULD be a warning (certificate with wrong name). However, here, I could log in properly without any warning. Let me explain: if you log in on www.opensolaris.biz, you get the warning. However, if, like me, you followed a Google hit directly to a thread, and log in using the login link on the upper right corner, then you are momentarily transfered to the opensolaris.org login page (no warning), then back to opensolaris.biz after entering your username and password and clicking on Sign in. I didn't spot the 3-letter change in the address bar. http://www.opensolaris.biz/jive/message.jspa?messageID=189488 So, the question is, is it proper that the web server on opensolaris.org also answers when it's called with another name? I think it shouldn't. Sorry for feeling paranoid. Laurent The whois details are there, it's one Michael Nowak in the UK: http://www.generic-nic.net/dyn/whois/ask?query=opensolaris.biz $ host www.opensolaris.biz www.opensolaris.biz is an alias for opensolaris.biz. opensolaris.biz has address 72.5.123.5 opensolaris.biz mail is handled by 0 smtp.secureserver.net. opensolaris.biz mail is handled by 10 mailstore1.secureserver.net. $ host www.opensolaris.org www.opensolaris.org is an alias for opensolaris.org. opensolaris.org has address 72.5.123.5 opensolaris.org mail is handled by 10 oss-mail1.opensolaris.org. This message posted from opensolaris.org _______________________________________________ website-discuss mailing list website-discuss at opensolaris.org
