3 ms·
But if the attacker is unable to sign DNS responses, and you're validating those responses, then you're not going to have a bad time. I don't really understand
by AndyMcConachie 9y ago
But if the attacker is unable to sign DNS responses, and you're validating those responses, then you're not going to have a bad time.
I don't really understand your argument. I'm talking specifics and you seem to be talking about some hypothetical.
- tptacek 9y agoThe underlying "vulnerability" here is misconfiguration. DNSSEC doesn't defend against misconfiguration. That's the simple point I'm making.