Contents
There’s no way to let a cookie be accessible from another 2nd-level domain, so other.com will never receive a cookie set at site.com . It’s a safety restriction, to allow us to store sensitive data in cookies, that should be available only on one site.
DNS Cookies is a security mechanism which is developed for that purpose. DNS Cookies is a lightweight DNS transaction security mechanism that protects DNS servers and DNS clients from a variety of attacks like DoS attacks, DNS Amplification attacks, DNS Cache Poisoning, etc.
What are name value pairs in cookies?
Each cookie is separated by a comma , and each cookie attributes are separated by semicolons ; . The two values required are the first name=value pair which are always string values. The remaining attributes that set other parameters of a cookie are optional and set other parameters of a cookie.
How to protect against cross subdomain Cookie attacks?
Public Suffix has a list of domains that all vendors (Chrome/Firefox/IE/Safari/Opera) use to avoid this problem of stealing cookies from other subdomains (along side other features). The list is updated daily and is maintained on Github.
How does an attacker do a DNS attack?
Attacker will drive the traffic away from real DNS servers and redirect them to a “pirate” server, unbeknownst to the users. This may cause in the corruption/theft of a user’s personal data. An attacker will typically spoof his IP address while performing an attack.
How are random query names used in DNS attacks?
Attacks using random query name as a subdomain of the victim’s domain, causing saturation of its authoritative server capacity. This attack uses either open relay DNS or DNS recursive farm at ISP in order to also exhaust resources of servers waiting for answers from the authoritative server.
What is a DNS hijacking / redirection attack?
What is a DNS hijacking / redirection attack Domain Name Server (DNS) hijacking, also named DNS redirection, is a type of DNS attack in which DNS queries are incorrectly resolved in order to unexpectedly redirect users to malicious sites.