Live data from Hacker News

UK MoD accidentally sends classified emails meant for US (.mil) to Mali (.ml)

theguardian.com

11–13 of 13 posts

Re: UK MoD accidentally sends classified emails meant for US (.mil) to Mali (.ml)

#11
post #10

Earlier quoted context omitted.

It's been this way for 40 years. Are you a taxpayer? I'd rather not pay for any such retrofit. Furthermore, what makes you think that typos won't be made with any different domain name? Why would a fake hypothetical improvement of the situation drive a massive rewrite of millions of lines of code, server configurations, TLS certificates, specification documents...?

You're vastly exaggerating the costs of changing domains (and setting up a redirect). I'm glad you mention TLS certificate, because those are an ongoing thing, not something you set up once leave unchanged for 40 years.

You can't set up a redirect, because if you leave a redirect in place, then people can send email to the original domain, and we're back where we started with the Mali misdirections. That's what the article is about.

Re: UK MoD accidentally sends classified emails meant for US (.mil) to Mali (.ml)

#12
post #10

Earlier quoted context omitted.

You're vastly exaggerating the costs of changing domains (and setting up a redirect). I'm glad you mention TLS certificate, because those are an ongoing thing, not something you set up once leave unchanged for 40 years.

You can't set up a redirect, because if you leave a redirect in place, then people can send email to the original domain, and we're back where we started with the Mali misdirections. That's what the article is about.

True, but to avoid chaos you have a redirect for a while. Send a warning at first, then send an error.

Re: UK MoD accidentally sends classified emails meant for US (.mil) to Mali (.ml)

#13
post #12

Earlier quoted context omitted.

You can't set up a redirect, because if you leave a redirect in place, then people can send email to the original domain, and we're back where we started with the Mali misdirections. That's what the article is about.

True, but to avoid chaos you have a redirect for a while. Send a warning at first, then send an error.

This is the US Military we're talking about. Have you ever tried to enter an Air Force base without ID and clearance?

You know what comes after a warning.

Post reply on HN