I returned recently to dabbling with virtual host sites on Apache2. Some long time ago I had created a number of localhost virtual host sites, just for development testing before deploying. One such site I created was phpmyadmin.dev (for testing phpmyadmin).
I tried to launch my dormant localhost site and I was surprised to see this warning message popping up.
Stop using *.DEV
Recently (psst 2017!), Google has purchased the .dev top-level. This means that you had 2 years to move away from using .dev, but you didn't. You still can, and you have to!
You as a developer might just have saved your company from leaking database credentials. Why? Because this domain could've been used against you.
You could've been fished by an attacker who's using the .dev domain to spoof internal domains.
I returned recently to dabbling with virtual host sites on Apache2. Some long time ago I had created a number of localhost virtual host sites, just for development testing before deploying. One such site I created was phpmyadmin.dev (for testing phpmyadmin).
I tried to launch my dormant localhost site and I was surprised to see this warning message popping up.
Stop using *.DEV
Recently (psst 2017!), Google has purchased the .dev top-level. This means that you had 2 years to move away from using .dev, but you didn't. You still can, and you have to!
You as a developer might just have saved your company from leaking database credentials. Why? Because this domain could've been used against you.
You could've been fished by an attacker who's using the .dev domain to spoof internal domains.
Still not convinced?! Read THIS!
I am taking the precaution now of changing all my .dev virtual host sites to .localhost.
I am just posting this as information for those who may have old dev virtual host sites archived away.