← Back to context Comment by kevmo314 5 days ago Someone with the ability to register .gov domains is trying to make a sneaky buck. 2 comments kevmo314 Reply rationalist 5 days ago It used to be anyone with a fax machine could register any .gov but they fixed that when there was a news report about it. afn 3 days ago I was curious about this, so for anyone else who’s interested, here’s a KrebsOnSecurity article from 2019 about how easy it was to fraudulently register a .gov domain:https://krebsonsecurity.com/2019/11/its-way-too-easy-to-get-...I haven’t seen any follow-up reporting, but it looks like the process now requires some semblance of identity verification:https://get.gov/domains/before/
rationalist 5 days ago It used to be anyone with a fax machine could register any .gov but they fixed that when there was a news report about it. afn 3 days ago I was curious about this, so for anyone else who’s interested, here’s a KrebsOnSecurity article from 2019 about how easy it was to fraudulently register a .gov domain:https://krebsonsecurity.com/2019/11/its-way-too-easy-to-get-...I haven’t seen any follow-up reporting, but it looks like the process now requires some semblance of identity verification:https://get.gov/domains/before/
afn 3 days ago I was curious about this, so for anyone else who’s interested, here’s a KrebsOnSecurity article from 2019 about how easy it was to fraudulently register a .gov domain:https://krebsonsecurity.com/2019/11/its-way-too-easy-to-get-...I haven’t seen any follow-up reporting, but it looks like the process now requires some semblance of identity verification:https://get.gov/domains/before/
It used to be anyone with a fax machine could register any .gov but they fixed that when there was a news report about it.
I was curious about this, so for anyone else who’s interested, here’s a KrebsOnSecurity article from 2019 about how easy it was to fraudulently register a .gov domain:
https://krebsonsecurity.com/2019/11/its-way-too-easy-to-get-...
I haven’t seen any follow-up reporting, but it looks like the process now requires some semblance of identity verification:
https://get.gov/domains/before/