Problems with DNS rebinding demo

30 June 2008

It's my fault this thing won't work on IE as planned.

Apparently, IE doesn't allow "third party cookies" by default. For instance, cookies that are set by an image that is hosted on another domain.

So if I put the following code on this blog page:

<img src="http://own-the.net/setcookie.php">

The "image" will be able to set cookies on own-the.net.

But if I call something from another domain:

<img src="http://other-domain.com/setcookie.php">

It won't be able to set cookies on other-domain.com. (And obviously not on own-the.net)

So it happens, that my DNS rebinding demo relies on a cookie set by an image on another domain. Thus, in it's current state, the demo won't work on IE.

However, this is not critical. The cookie is just used for some "internal business" of the demo. It's very much possible to rewrite the thing to work without it. I just don't know when I'll do it, though.

Posted by: kGen | In category: DNS | Comments (0)

---