As a result of user applications increasingly registering actual “.zip” files as URLs, these filenames may trigger unintended DNS queries or web requests, thereby revealing possibly sensitive or internal company data in a file’s name to any actor monitoring the associated DNS server

Some more context around the .zip domains.

  • JapanStar49@infosec.pubEnglish
    2·
    1 year ago

    I’m hoping modern browsers could use this opportunity to add more security around the confusing usage of @