I recall that subdomains are their own record inside a DNS, which would imply that anyone can claim that their server is a non-existent subdomain of the real domain

  • MartianSands
    link
    fedilink
    arrow-up
    1
    ·
    3 hours ago

    Really? They don’t use TLS at all? That sounds hilariously insecure