As cited
Copy frozen at (site build).
research
RCS and DNS: The NAPTR Record
RCS (Rich Communication Services) is increasingly used on modern iOS and Android devices as a potential replacement for SMS, featuring optional end-to-end encryption and digital signing. The article explains how NAPTR (Naming Authority Pointer) DNS records, defined in RFC 2915, are being used to locate RCS servers by enabling clients to discover SIP-based service endpoints rather than just IP addresses.
Why it matters: Network defenders should recognize NAPTR queries as legitimate RCS infrastructure traffic during network monitoring, while understanding that this DNS record type uses regular expressions for URI rewriting, presenting a potential attack surface if misconfigured or exploited.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
research
RCS and DNS: The NAPTR Record
RCS (Rich Communication Services) is increasingly used on modern iOS and Android devices as a potential replacement for SMS, featuring optional end-to-end encryption and digital signing. The article explains how NAPTR (Naming Authority Pointer) DNS records, defined in RFC 2915, are being used to locate RCS servers by enabling clients to discover SIP-based service endpoints rather than just IP addresses.
Why it matters: Network defenders should recognize NAPTR queries as legitimate RCS infrastructure traffic during network monitoring, while understanding that this DNS record type uses regular expressions for URI rewriting, presenting a potential attack surface if misconfigured or exploited.
- Source published
- First seen by Cybersecurity Tracker