Appeals court rules against North Dakota tribes in voting rights case that could go to Supreme Court
https://apnews.com/article/voting-rights-act-redistricting-lawsuits-north-dakota-7d0bfc48f5a335db0a01d2ab66df7377?utm_source=flipboard&utm_medium=activitypub
Posted into Politics @politics-AssociatedPress
Aral Balkan
in reply to CybersecKyle • • •So “people would notice a link to mybank.com going to hahapwned.com but not to 89.72.4.2?”
People are more likely, not less, to smell something fishy if they see a random string of digits when they expect the name of a site they trust.
If this is the only argument against certificates for IP addresses, I think we’re good.
Aral Balkan reshared this.
CybersecKyle
in reply to Aral Balkan • • •Great point — and I agree that most users would be suspicious if they saw an IP address like 89.72.4.2 instead of a familiar domain like mybank.com. The concern raised in the article, though, was more about scenarios where users don’t see the link clearly — such as in emails, PDFs, or messaging apps where URLs may be masked behind anchor text or shortened links. For example, a phishing email might show a link that says “View Invoice” but actually points to https: //203.0.113.10/login.
Experienced users like you and I know to hover over links, check certificate info, or inspect the address bar. But many users don’t do that — or worse, they click links without verifying anything. According to the Verizon DBIR and other phishing studies, this is still one of the top attack vectors today.
Also, I don’t think the article was arguing against IP certs outright — just highlighting that, like with any new capability, there's potential for abuse that the broader public (and infosec community) should be aware of.
#CyberSecurity #Phishing #DigitalTrust #TLS
Farshid Hakimy / فرشید
in reply to Aral Balkan • • •also it's not like this is something new. I am pretty sure Cloudflare has a certificate for 1.1.1.1 even if it redirects to a domain.
And even without LE there are other CAs offering certificates for IP addresses.