Patent ID: 9313205
Filing Date: 2016-04-12
CPC Classification: H04L

Claim Text:
1. A computer-implemented method executed by one or more processors, the method comprising: receiving, at a domain name server, a request from a client to resolve a domain name into a corresponding address; determining that secure requests from the client directed to the domain name cannot be distinguished by the domain name server from secure requests from the client directed to at least one other domain name based on the corresponding address being shared between the domain name and the at least one other domain name; in response to receiving the request to resolve the domain name and in response to determining that secure requests from the client directed to the domain name cannot be distinguished, associating, by the domain name server, a spoofed address with the domain name, wherein the spoofed address is configured to uniquely identify the domain name and is associated with a particular server, and wherein the spoofed address is different than the corresponding address; in response to associating the spoofed address with the domain name, sending, by the domain name server, a response to the request to resolve the domain name, the response including the spoofed address; receiving, at the particular server, a secure request for a resource, the secure request directed to the spoofed address; determining, by the particular server, that the secure request is directed to the domain name based on the association between the spoofed address and the domain name, wherein the determination is made without decrypting the secure request; and selectively allowing the secure request based at least in part on determining that the secure request is directed to the domain name.