Heads up on parking traffic

[wellmanneredsquirrel]

If parking is material to you, I recommend you read this recent piece of news : https://www.theregister.co.uk/2017/03/28/congress_approves_sale_of_internet_histories/

It is my belief that ISPs will be even more tempted than before to hijack error traffic/parking traffic to display their own ad inventory. It's a no brainer in my mind, very easy to implement (i.e. DNS RPZ).

 

[dordomai]

hijacking parking traffic is not easy to implement because you would first have to figure out what a parked page is and what not. if you misclassify you could screw up user experience, people could get mad at you because they can not access the page they want to.

it is too messy to implement IMO and there might be more money in hijacking failed dns lookups which would not harm parking revenues. the biggest threat to parking is the upstream provider itself and to a lesser part adblockers and browser developers.

 

[wellmanneredsquirrel]

Very easy to implement. Read about DNS RPZ, which is baked into BIND (the most widely used DNS software on the internet).

Quote from https://dnsrpz.info/ :
Examples include: [...]

• If one know a bad IP address or subnet, one can block clients from accessing hostnames that reference it.
• If one knows a nameserver that doesn't host anything except bad domains, one can block clients from accessing DNS information hosted by those nameservers.

I remind you that the "upstream provider" forces parking cos to refuse redirects, thus virutally all parked domains use nameservers which are easily identifiable. It's a piece of cake in most case.

 

[dordomai]

Very easy to implement. Read about DNS RPZ, which is baked into BIND (the most widely used DNS software on the internet).

Quote from https://dnsrpz.info/ :
Examples include: [...]

• If one know a bad IP address or subnet, one can block clients from accessing hostnames that reference it.
• If one knows a nameserver that doesn't host anything except bad domains, one can block clients from accessing DNS information hosted by those nameservers.

I remind you that the "upstream provider" forces parking cos to refuse redirects, thus virutally all parked domains use nameservers which are easily identifiable. It's a piece of cake in most case.

this could be circumvented by parking companies by some means probably if it started affecting their bottom line, the isp would have to put in effort to have up to date data just like we have in spam monitoring. Namepros has Cloudflare Nameservers for example. They could point domains to a neutral, clean nameserver and serve 'malicious' content from nameservers that they rotate.