Daily Archives: August 1, 2007

[not] Protecting web sites and services from DNS rebinding attacks

Posted on August 1, 2007 by David Megginson

Update: Nope, my solution won’t work. As Christian Matthies points out in the comments, it is possible to spoof the HTTP Host header as well (his link in the comment is broken because of an extra comma, but this one … Continue reading →

Tagged , , , | 8 Comments