New In browser URL verification tool

2 points by integrity_softw ↗ HN
This is an in web browser address bar URL authenticity verification tool using only a special redirection system attached to the subdomains of trustedurl.org

For example, to check the authenticity of and visit the authenticated site, add .trustedurl.org after the Top-Level Domain.

>getmonero.org.trustedurl.org

Entered into the address bar, this resolves to

>getmonero.org

You can also just type in the domain name without the TLD

>getmonero.trustedurl.org

Which similarily resolves to

>https://getmonero.org

This of course also works with the protocol

>https://getmonero.org.trustedurl.org >https://getmonero.trustedurl.org

Now say an attacker were to make a phishing site getphished.org, and you were uncertain if it were authentic. In this case, just apply the same postfix to the suspect domain

>getphished.org.trustedurl.org

Which resolves to a connection error page, because it isn't in the authentic URL whitelist.

So far only a few cryptocurrency exchanges simpleswap.io, trocador.app, bisq and wallets bitcoin.org, electrum.org, getmonero.org have been added to the whitelist, along with torproject.org, i2p.net, freenet.org, devuan.org, tails.net

SimpleSwap cryptocurrency exchange >simpleswap.trustedurl.org >simpleswap.io.trustedurl.org

TAILS OS >tails.trustedurl.org >tails.net.trustedurl.org

Monero wallet >getmonero.org.trustedurl.org >getmonero.trustedurl.org

There are many fake websites and URLs that closely resemble the real sites, and going on the wrong site can easily lead to getting scammed of money and downloading malware. Using this tool prevents this by providing an extra layer of security if one hasn't memorized the exact fully qualified domain.

3 comments

[ 0.46 ms ] story [ 64.9 ms ] thread
is there a repo of what sites are supported
Literally just finished setting up the whitelist of sites in the DNS record, haven't made a repository but that would be an excellent idea for a submission system. I'll link one in the follow up reply.