Plusnet Leaks Your Username to Every Website You Visit by Default

[#1]

After several months on Plusnet, I realised that they configure a reverse DNS record that includes your username (username.plus.com).

For the less technical folks, what this means is that every website you go to can see what your plusnet username is. If you're using the same username for plusnet as you are using on other sites or if you have personally identifying information in it such as your name, that information is exposed.

I have a static IP with Plusnet so I'm not sure if this also applies to those on dynamic addresses. Perhaps this community knows and can add this in the comments?

When I called to report it, they said they could flip a switch and turn on "private reverse DNS" so that the username is no longer used in the reverse DNS entry. I asked why is it not private by default and was told, "that's above my paygrade".

I find this to be a remarkable privacy issue from an ISP that seems to leak user's data for no reason. They have the capability to protect it and aren't even making any money from it. I don't understand.

[#2]

@Bobbyhyam100 

This is a 'feature' of static IP addresses used by businesses to advertise that their IP address is correct. It does not apply to dynamic addresses.

To check use this link and select the address for full details: https://whatismyipaddress.com/   

It is unfortunately the default setting of Plusnet static addresses. As you say, this can be changed if requested on the Everything Else board.

[#3]

Moderator's note:
Thread moved from Full Fibre to Everything Else

[#4]

This is all a tad alarmist. It is quite normal for one’s domain name to be the rDNS look up as per the domain email address for those having email you@youraccount.plus.com

This only applies to the few users who have chosen to have a static IP address … which is now not an option.

[#5]

---

@Townman wrote:

... the few users who have chosen to have a static IP address … which is now not an option.

---

Not forgetting of course that in the past a (FREE) static IP address was included as a selling point with certain Plusnet accounts.  It was certainly one of the account 'features' which I considered when signing up.

[#6]

It’s still free. Just ask for it.

[#7]

@Bobbyhyam100 It isn't - as from (I think) late November last year. They no longer offer statics, and when they did there was a £5.00 one-off charge.

[#8]

---

@Bobbyhyam100 wrote:
It’s still free. Just ask for it.

---

Where did you get that 'nugget' of "information" from?

Static IPs have not been free for many years.  As advised above, they are not available at all now ... a path which many ISPs using BT's infrastructure have followed.

[#9]

My mistake. It was a one-off £5 cost.

[#10]

---

@Townman wrote:
This is all a tad alarmist. It is quite normal for one’s domain name to be the rDNS look up as per the domain email address for those having email you@youraccount.plus.com

This only applies to the few users who have chosen to have a static IP address … which is now not an option.

---

Nope! At least, not in the past. Several, including myself, had to ask for the rDNS look up to be changed. It was a not uncommon request a couple of years ago on here. I have never asked for or (officially) had a static IP address.

Though my IP address did indeed often prove to be pretty static!

[#11]

There were explicit and implicit user based decisions which brought about having a static IP address. One such user decision was to use the remote firewall service, which is history.