Comment 4 for bug 1040200

Note, I talked with Jamie Strandboge and he pointed out that '3' is the most likely vector for attack.
It seems like adding '.' to http://instance-data is the right thing to do.

I'm dns ignorant. Garret, can you explain how much more difficult or invasive it would be to add a top level 'instance-data' entry compared to one under another search domain?