A bunch of people have written to me with a ton of links describing in much greater detail exactly what the Sitefinder web bug did/does. Unfortunately, none of them explicitly indicate whether or not there is any lasting impact to end-users who previously visited this page.
A couple of people also indicated that a lot of this is old hat.
Definitely.
Somewhere along the way, this little detail about Sitefinder escaped my attention until Steve brought it up in his presentation to the registrar constituency the other day. Hopefully that doesn't make my questions irrelevant :)
- What Verisign tracks when you type in a bad domain
- Bug Reveals the Snooper in VeriSign's Site Finder
- SiteFinder Is Leaking Data
- Index of Concerns as to VeriSign Site Finder
- Security and Stability Advisory Committee meeting 7 October 2003 in Washington, DC.
- SSAC Powerpoint presentation to GNSO Council, 07/20



