In order for all browsers in an organization to be supplied the same proxy policy, without configuring each browser manually, both the below technologies are required:

The WPAD standard defines two alternative methods the system administrator can use to publish the location of the proxy configuration file, using the Dynamic Host Configuration Protocol (DHCP) or the Domain Name System (DNS):

Before fetching its first page, a web browser implementing this method sends the local DHCP server a DHCPINFORM query, and uses the URL from the WPAD option in the server's reply. If the DHCP server does not provide the desired information, DNS is used. If, for example, the network name of the user's computer is pc.department.branch.example.com, the browser will try the following URLs in turn until it finds a proxy configuration file within the domain of the client:

(Note: These are examples and may not be live URLs.)

In order for WPAD to work, a few requirements have to be met:

While greatly simplifying configuration of one organisation's web browsers, the WPAD protocol has to be used with care: simple mistakes can open doors for attackers to change what appears on a users browser:

Through the WPAD file, the attacker can point users browsers to their own proxies and intercept and modify all of WWW traffic. Although a simplistic fix for Windows WPAD handling was applied in 2005, it only fixed the problem for the .com domain. A presentation at Kiwicon showed that the rest of the world was still critically vulnerable to this security hole, with a sample domain registered in New Zealand for testing purposes receiving proxy requests from all over the country at the rate of several a second.

Thus, an administrator should make sure that a user can trust all the DHCP servers in an organisation and that all possible wpad domains for the organisation are under control. Furthermore, if there's no wpad domain configured for an organisation, a user will go to whatever external location has the next wpad site in the domain hierarchy and use that for its configuration. This allows whoever registers the wpad subdomain in a particular country to perform a man-in-the-middle attack on large portions of that country's internet traffic by setting themselves as a proxy for all traffic or sites of interest.

On top of these traps, the WPAD method fetches a JavaScript file and executes it on all users browsers, even when they have disabled JavaScript for viewing web pages.

Popular Titles (Displaying 5 Results)

	1.	Knocked Up (2007) aka "Wpadka" - Poland
	2.	Black Hawk Down (2001) aka "Pad crnog jastreba" - Croatia, Yugoslavia
	3.	Downfall (2004) aka "Der Untergang" - Germany (original title) aka "The Downfall: Hitler and the End of the Third Reich" - USA aka "Pád Tretej ríse" - Slovakia aka "Hitler: Konacan pad" - Croatia aka "Pád Tretí ríse" - Czech Republic
	4.	Falling Down (1993) aka "Volný pád" - Czech Republic aka "Prosti pad" - Slovenia aka "Pad" - Yugoslavia
	5.	The Parent Trap (1998) aka "Disney's The Parent Trap" - USA (complete title) aka "Family Game" - Japan (English title) aka "Apád-anyád ide jöjjön!" - Hungary

Titles (Approx Matches) (Displaying 15 Results)

	1.	The Olsen Gang Sees Red (1976) aka "Olsen-banden ser rødt" - Denmark (original title) aka "Gang Olsena wpada w szal" - Poland
	2.	A Summer in La Goulette (1996) aka "Un été à La Goulette" - Tunisia (original title) aka "Halk-el-wad" - Tunisia (Arabic title)
	3.	The Fall (1999) aka "Pád" - Czech Republic (original title)
	4.	Killer Pad (2008)
	5.	Padeniye Berlina (1-r seria) (1949) aka "The Fall of Berlin" - USA (theatrical title) aka "Pád Berlína I." - Czech Republic
	6.	Anubis: Het pad der 7 zonden (2008) aka "Anubis en het pad der zeven zonden" - Netherlands (promotional title) aka "Anubis en het pad der 7 zonden" - Netherlands (alternative spelling)
	7.	Slobodan pad (2004)
	8.	The Pad and How to Use It (1966)
	9.	When the Daltons Rode (1940) aka "Pád rodu Daltonu" - Czech Republic (Czech title)
	10.	Meta (1971) (TV) aka "The Pad"
	11.	Falling in the Paradise (2004) aka "Pad u raj" - Germany (original title)
	12.	Flor silvestre (1943) aka "Het doornige pad" - Netherlands (imdb display title)
	13.	Padeniye Berlina (2-r seria) (1949) aka "The Fall of Berlin" - USA (theatrical title) aka "Pád Berlína II." - Czech Republic
	14.	Pad Italije (1981) aka "The Fall of Italy" - Canada (English title)
	15.	Jao saao Pad Thai (2004) aka "Pad Thai Bride" - Thailand (English title) aka "Pad Thai Story" - Thailand (English title)

IMDb Site Features (Approx Matches) (Displaying 1 Result)

1.

iPhone/iPad/iPod app Every movie, TV show and celebrity in your pocket

Names (Approx Matches) (Displaying 1 Result)

1.

Frank Wead (Writer, Dive Bomber (1941))  aka "Lt. Comm. Frank Wead"

Characters (Approx Matches) (Displaying 1 Result)

1.

Private Investigator Richard Wad ("First Years" (2001), Kevin Weisman)

Companies (Approx Matches) (Displaying 1 Result)

1.

WPA Film Library [us] (Film, Video and Audio Stock)

Keywords (Approx Matches) (Displaying 1 Result)

1.

lily-pad (14 titles - Tom and Jerry: The Magic Ring (2002) (V), ...)