Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: http://www.domainname.com./ (with the ending)

Subject: Re: http://www.domainname.com./ (with the ending)
Date: Wed, 13 Apr 2005 17:52:55 -0700
On 4/13/05, Scovetta, Michael V <Michael.Scovetta@ca.com> wrote:
All--

I don't think this is anything to be concerned about, but I find it odd that 
some websites
(looks like IIS-sites), if you go to http://server./ (with a period 
appended), you usually
get a "no web site configured", or "under construction". I guess the browser 
ignores
the last . and finds the name in DNS, but then puts the . in the Host header.

The last "." in a domain name is valid.  In fact, if it is not there,
it is implied.
"." in DNS is the root of the global DNS tree.  From this root spawns
the "com", "edu",
"jp", and so on.  There are specific nameservers for root (".") that
are different than
the nameservers for "com.", which are different for "org."  So, the
"." is not stripped
for the DNS query.  A fully qualified domain name ending with a "." is usually
considered as the canonical form.

The webservers just need to add the explicit "." version of the name
to be an alias for the
virtual host.  This would be true for any webserver that did no
"fuzzy" matching to the
virtual host.  (Oh, you really mean the URL without the ".".)

Apache does a normalization to the host name given.  In this
normalization it strips the ".".
--
END OF LINE
       -MCP

<Prev in Thread] Current Thread [Next in Thread>