[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

https://<FQDN>:<port> vs. https://<IP address>:<port>.



Noticed this oddity when working with the new service.

$ nslookup hornby.islandhosting.com
Server:         192.168.0.1
Address:        192.168.0.1#53

Non-authoritative answer:
Name:   hornby.islandhosting.com
Address: 158.69.159.172
Name:   hornby.islandhosting.com
Address: 2607:5300:203:66b5::

$ nslookup mail.easthope.ca
Server:         192.168.0.1
Address:        192.168.0.1#53

Non-authoritative answer:
mail.easthope.ca        canonical name = easthope.ca.
Name:   easthope.ca
Address: 158.69.159.172

As expected, login at https://hornby.islandhosting.com:2096 and at
https://mail.easthope.ca:2096 appear equivalent.

But for URL https://158.69.159.172:2096 Firefox warns,

"Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to
158.69.159.172. If you visit this site, attackers could try to steal
information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you
can do to resolve it. You can notify the website’s administrator
about the problem."

What is the risk from an IP address?  Misconfiguration at Island Hosting
as Firefox suggests?

Thx,                             ... P.


Reply to: