Email or username:

Password:

Forgot your password?
Top-level
Gregory Trolliet

@inventor @siegi @fediversereport I don't understant. As owner of trolliet.info, you mean that anybody can create social.trolliet.info without my conscent and/or knowing?

7 comments
Inventor

@Faket @siegi @fediversereport
What I am saying is that you or anyone who is not the government could register any domain similar to a domain that a legit governmental organization uses, i.e. mimic it, and then create a "social." subdomain to lure fools.
Example: social.govern.ment.eu being created by the owner of ment.eu is totally plausible.
It will happen if this idea that "subdomains mean something" takes roots.

Gregory Trolliet

@inventor @siegi @fediversereport But since the owner/administrator of admin.ch is the government, what better way to certify a new service than to make it a service.admin.ch?

Inventor

@Faket @siegi @fediversereport
It is already certified by the domain. The subdomain is arbitrary and serves no purpose other than being a name for a service/server/something. The end user must only pay attention to the domain and TLS certificate for the purpose of validation of legitimacy.

Gregory Trolliet

@inventor @siegi @fediversereport So? Are you saying that doing a social.admin.ch subdomain is a good thing? I don't understand your point TBH.

Inventor

@Faket @siegi @fediversereport
My point makes reference to this quote from the second post on this thread:
"Following this pattern (social. subdomains) makes it immediately clear to people they are communicating with an official government account."

This is false. Establishing a convention may be a cool idea, but it adds nothing to security or "making anything clear". Subdomains mean nothing in terms of validation of legitimacy.
Root domains and certificates, on the other hand, mean everything.

Gregory Trolliet replied to Inventor

@inventor @siegi @fediversereport Are you suggesting that it's not better to have a [social|mastodon|toot|whatever].admin.ch than any other random root domain?

Inventor replied to Gregory

@Faket @siegi @fediversereport It makes no difference.
In fact, now that I think of it, a simple convention about subdomains doesn't make sense either, since many countries speak different languages.

Go Up