ZA NiC
free domain names
about
policy
whois
register
mailing list
faq
queue status
contact us
To subscribe to our mailing list, send mail to freedns-subscribe@za.net or visit the mailing list web page and subscribe from there.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FreeDNS] Domain modification completely insecure

If you own a za.net or za.org domain please be aware that your domain contact details and nameserver records can be changed at any time by anyone.
The only "security check" that the modification system uses is to check that the email address in the "From:" field of the domain modify email matches the email listed in the domain whois technical contact.
Seeing as anyone can change the "From:" field of their email, and seeing as no acknowledgement reply is required for the domain modify request, anyone is able to change the domain records for any ZA NiC domain.
Whether or not this domain registry is free, this level of security is unacceptable. People are registering domains in good faith without the knowledge that your security procedures are entirely inadequate. 

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger 

_____________________________________________________
FreeDNS                    ZA NiC - free domain names
freedns@xxxxxx    Archive: http://www.za.net/freedns/

©1998-2017 ZA NiC