3 ms·
Which is why I brought up DNSoTLS which you conveniently ignored. That 'last mile' problem you speak of is being worked on at the IETF. It's not an easy problem
by AndyMcConachie 10y ago
Which is why I brought up DNSoTLS which you conveniently ignored. That 'last mile' problem you speak of is being worked on at the IETF. It's not an easy problem to solve. But I suspect this argument of yours, which is valid BTW, will be less of problem in 5 years. We're already starting to see DNSoTLS testing happening.
You could also run a DNSSEC validating stub resolver on your laptop. Or you can run DNSMasq on my home router with DNSSEC validation enabled. Both of these effectively prevent the MITM you bring up.