Hacker News Reader

Pet peeve: Why do they use subdomains (marketingreportoptout.visa.com), thus making it a bit easier for the scammers to register similar domains?

marketingreportoptout-visa.com is still available for any scammer to register. It costs Visa (or anyone) less than $200 to register it for 10 years. Can't they at least register these very obvious domains?

How difficult is it to use URLs like this? visa.com/marketingoptout visa.com/links

View on HN

From a technical standpoint, it is possible to configure separate DNS records for subdomains, so something.visa.com can be set up completely independently from their main website. And it won't have to share cookies either, making it more secure. For visa.com/something, you would need to add a routing rule at the application level in whatever server is hosting visa.com.

No, this can be done in the loadbalancer before any application. You can load balance on L7. This would be a trivial thing.

A trivial thing that would became a mess really fast on a complex website.

A new subdomain for every different "website" is the clean solution in my opinion.

Nothing is trivial for a decades-old website.

Reply on news.ycombinator.com