4 ms·
> Poisoning the DNS subsystem of your computer is not safe. At the very least it could record which requests you made indefinitely. This does need to be fixed.
by mifreewil 10y ago
> Poisoning the DNS subsystem of your computer is not safe. At the very least it could record which requests you made indefinitely. This does need to be fixed.
I'm assuming that if a domain used DNSSEC this would protect the user against this type of attack?
- fulafel 10y agoIf your upstream DNS server and your OS support DNSSEC, it might require small changes to the attack (spoofing IP addresses instead of DNS names). There really is no substitute for end-to-end crypto in networking.