[Discuss] My Bank's Web Site is Behaving Oddly

[joe at polcari.com (Joe Polcari)]

The domain did not expire. It was renewed in 2015 for 2 years. Look at the Whois output.

Sent from my iPhone

> On May 4, 2016, at 6:53 PM, Kent Borg <kentborg at borg.org> wrote:
> 
>> On 05/04/2016 05:51 PM, John Hall wrote:
>> Are you using your ISP's DNS ? Is it comcast?
> 
> Various. I did manual lookups on 8.8.8.8, but at home I run my own DNS, on my phone I get T-Mobile's, at Linode I must be using theirs.
> 
> So what is the difference between my bank using Incapsula to run its website, and someone spotting that a bank's domain is about to expire and setting up a middleman in hopes it will lapse, grabbing it if it does? If the certificate and the whois data make no mention of the bank, how do I know I am talking to the bank? Just trust that Incapsula was careful in vetting the account?
> 
> -kb, the Kent who finds it unnerving that his bank shares a cert with 100-something other domains.
> 
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss