Mozilla performing pdf.js DNS queries?

Thu Nov 13 14:27:50 UTC 2014

David Hofstee schreef op 13-11-2014 14:39:
> Pdf is quite a standard. One might wonder what it cannot do. One could call it evil. 
> 
> http://superuser.com/questions/368486/link-to-image-within-pdf-and-have-the-image-displayed 

Ah yes, a image within a PDF could definitely do this I suppose. I just
thought it odd that the browser would leak this out.

dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11
dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11

This could become a whole can of worms if a .js TLD ever makes it to the
internet and registers this domain name.

We see this from Ubuntu terminals running Mozilla Firefox 33.0

Best regards,

Seth

> 
> 
> 
> David Hofstee
> 
> Deliverability Management
> MailPlus B.V. Netherlands (ESP)
> 
> 
> -----Oorspronkelijk bericht-----
> Van: NANOG [mailto:nanog-bounces at nanog.org] Namens Seth Mos
> Verzonden: Thursday, November 13, 2014 2:26 PM
> Aan: NANOG list
> Onderwerp: Mozilla performing pdf.js DNS queries?
> 
> Hi,
> 
> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a decent amount of queries for pdf.js from what appear to be mozilla browsers.
> 
> Seems rather odd that it is performing DNS queries for a internal PDF viewer.
> 
> Has anyone else come across these lookups?
> 
> Kind regards,
> 
> Seth
> 
> 