Later archive addition

MitM Attack by Name Collision: Cause Analysis and Vulnerability Assessment in the New gTLD Era

Qi Alfred Chen, Eric Osterweil, Matthew Thomas and Z. Morley Mao

Study of WPAD proxy-discovery queries for internal namespaces that leak to the public DNS root, which became exploitable once the same strings were delegated as new gTLDs. Registering one such domain lets an attacker serve a proxy configuration and silently route a victim's whole web session through a man-in-the-middle proxy.

Record

Researcher

Qi Alfred Chen, Eric Osterweil, Matthew Thomas and Z. Morley Mao

Format

Whitepaper

In the archive

• Added to the 2016–17 archive after the original list was published

Related sources

• Talk recording

Tags

• dns
• proxy
• http
• measurement-study
• large-scale-scan

This page is the archive's own catalogue record. The research is the work of Qi Alfred Chen, Eric Osterweil, Matthew Thomas and Z. Morley Mao, first published at the original source. Preserved copies are kept so the citation survives its host.