The use of self-reported DNS names as authentication is flawed and can easily be spoofed by malicious users.