Hacker News new | ask | show | jobs
by jordemort 1373 days ago
I used to work for a guy who registered borgosoft.com and CNAMEed it to microsoft.com. In the days before HTTP 1.1, a Host: header was not required on a request, and it would happily serve up microsoft.com's content under borgosoft.com. Eventually they started requiring a host header, and the trick stopped working. The guy I worked for claimed credit for making them do this; I have my doubts.