3 ms·
If you can see a DNS request going out and can send a fake response that arrives before the real one, you have enough resources to pull off a MITM.
by billpg 11y ago
If you can see a DNS request going out and can send a fake response that arrives before the real one, you have enough resources to pull off a MITM.
- snori74 11y agoYes, but unless you're the ISP that's not going to be possible surely? Mailservers typically don't run over wireless.
- billpg 11y agoI was responding to the idea that being a man-in-the-middle is significantly more difficult than being a passive eavesdropper. If you're already a passive eavesdropper, all you need is the ability the send a DNS response and you're a man-in-the-middle.