3 ms·

So, how do you suggest to replace DNSSEC then, assuming that your enemy is a nation state intercepting your DNS queries and responding with NSA QUANTUM before t

So, how do you suggest to replace DNSSEC then, assuming that your enemy is a nation state intercepting your DNS queries and responding with NSA QUANTUM before the legitimate server does?

wglb 9y ago
Replace it with nothing.
- kuschku 9y ago
  Great, then my entire TLS setup is useless, and I can just use plaintext HTTP. The whole point is that at least CAs enforce DNSSEC, so no one can get a certificate for my site except for me.