From cd0bbfb9c3c7f8c311e5c4417b91ad088644d686 Mon Sep 17 00:00:00 2001 From: John Crispin Date: Tue, 25 Nov 2025 07:31:08 +0100 Subject: [PATCH] cloud_discovery: use .local TLD for standard FQDN discovery Change standard FQDN from 'openwifi.network' to 'openwifi.wlan.local' to prevent DNS hijacking attacks. The .local TLD is reserved for local network use (mDNS) and cannot be registered in public DNS, ensuring that discovery traffic cannot be redirected to attacker-controlled infrastructure. Signed-off-by: John Crispin --- feeds/tip/cloud_discovery/files/usr/bin/cloud_discovery | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/feeds/tip/cloud_discovery/files/usr/bin/cloud_discovery b/feeds/tip/cloud_discovery/files/usr/bin/cloud_discovery index d7e503c3b..42e8dfa3a 100755 --- a/feeds/tip/cloud_discovery/files/usr/bin/cloud_discovery +++ b/feeds/tip/cloud_discovery/files/usr/bin/cloud_discovery @@ -21,7 +21,7 @@ const DISCOVER_FLASH = "FLASH"; const DISCOVER_FQDN = "STANDARD_FQDN"; const DISCOVER_LOOKUP = "OpenLAN"; -const STANDARD_FQDN = "openwifi.network"; +const STANDARD_FQDN = "openwifi.wlan.local"; const STANDARD_FQDN_PORT = 15002; let ubus = libubus.connect();