Hello all,

I've belatedly noticed that, after following a well-placed Google hit, I had 
logged in and posted on www.opensolaris.BIZ. Okay, it's the real thing, the 
owner of the domain points it to the same IP address as www.opensolaris.org. 
However, this owner is not Sun. And the MX is definitely not the same.

BTW, I know the login is secured, and there SHOULD be a warning (certificate 
with wrong name). However, here, I could log in properly without any warning.

Let me explain: if you log in on www.opensolaris.biz, you get the warning.
However, if, like me, you followed a Google hit directly to a thread, and log 
in using the login link on the upper right corner, then you are momentarily 
transfered to the opensolaris.org login page (no warning), then back to 
opensolaris.biz after entering your username and password and clicking on Sign 
in. I didn't spot the 3-letter change in the address bar.

http://www.opensolaris.biz/jive/message.jspa?messageID=189488

So, the question is, is it proper that the web server on opensolaris.org also 
answers when it's called with another name? I think it shouldn't. 

Sorry for feeling paranoid. 

Laurent

The whois details are there, it's one Michael Nowak in the UK:
http://www.generic-nic.net/dyn/whois/ask?query=opensolaris.biz

$ host www.opensolaris.biz
www.opensolaris.biz is an alias for opensolaris.biz.
opensolaris.biz has address 72.5.123.5
opensolaris.biz mail is handled by 0 smtp.secureserver.net.
opensolaris.biz mail is handled by 10 mailstore1.secureserver.net.

$ host www.opensolaris.org
www.opensolaris.org is an alias for opensolaris.org.
opensolaris.org has address 72.5.123.5
opensolaris.org mail is handled by 10 oss-mail1.opensolaris.org.
 
 
This message posted from opensolaris.org
_______________________________________________
website-discuss mailing list
[email protected]

Reply via email to