Re: Get Full Hash for a host which has no prefixes

[Garrett Casto]

The host key is the hash prefix if no other prefixes are given. We just don't send it in this situation since we would be wasting bytes just repeating the host key. 

On Tue, Mar 19, 2013 at 11:55 AM, Vidit Agarwal <vid...@gmail.com> wrote:

Hello Group,

A few days ago, the HostKey 01b399ea was added in goog-malware-shavar without any prefixes.

This means that the entire host is listed as malware (tell me if this is incorrect).

I found that the HostKey for "p2-bfcekst4cmlgo-g6cgof7o52tj6kqe-533898-i2-v6exp3-v4.metric.gstatic.com" is also 01b399ea.

I am pretty sure that this host should not be in the list (as this is Google's caching servers). And every time there is traffic from this hosts - the alarm goes off.

I cannot verify with the full hash as I don't have any prefix. How can I proceed to make sure if this is indeed a valid malware URL?

Thanks

Vidit

--
You received this message because you are subscribed to the Google Groups "Google Safe Browsing API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-safe-browsi...@googlegroups.com.
To post to this group, send email to google-safe-...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-safe-browsing-api?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Vidit Agarwal]

Thank you!