Security News > 2020 > February > Dangerous Domain Corp.com Goes Up for Sale

As an early domain name investor, Mike O'Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com.

At issue is a problem known as "Namespace collision," a situation where domain names intended to be used exclusively on an internal company network end up overlapping with domains that can resolve normally on the open Internet.

Things can get far trickier with an internal Windows domain that does not map back to a second-level domain the organization actually owns and controls.

In practical terms, this means that whoever controls corp.com can passively intercept private communications from hundreds of thousands of computers that end up being taken outside of a corporate environment which uses this "Corp" designation for its Active Directory domain.

Over the years, Microsoft has shipped several software updates to help decrease the likelihood of namespace collisions that could create a security problem for companies that still rely on Active Directory domains that do not map to a domain they control.

News URL

https://krebsonsecurity.com/2020/02/dangerous-domain-corp-com-goes-up-for-sale/