Skip to content

Martin

← Customer feedback for Have I Been Pwned

My feedback

1 result found

  1. Allow root domain to verify subdomains

    136 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    8 comments  ·  General  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    An error occurred while saving the comment
    Martin commented  · 

    This thread is about SUB-domains, not domains as such. I see nothing in the link below that suggest that you're able to get alerts on subdomains. We do monitor our main domain name, but the problem is that none of our users have the mail address that ends with our domain, only with subdomains.

    An error occurred while saving the comment
    Martin commented  · 

    Any suggestions to work around this?
    We have over 400 subdomains at the university where I work. Far from all have their own abuse address, and even if they had, it would be quite a bit of work to add them all. The torrent that recently surfaced showed us the scope of employees using their work addresses for private reasons, but I'd much prefer being able to contact users based on haveibeenpwned information. Especially since - as you stated on twitter - there is no way to know where and when the email/password combos came from in that particular dump.

    Thank you. :)

    Martin supported this idea  · 

Feedback and Knowledge Base

(thinking…)