3 ms·
But if you're connecting to a site using HTTPS, would it even matter if a middleman changed the DNS response? If they respond with the IP of the wrong server, y
by Ajedi32 9y ago
But if you're connecting to a site using HTTPS, would it even matter if a middleman changed the DNS response? If they respond with the IP of the wrong server, you'll just get a certificate error.
And if you're not using HTTPS, they don't need to mess with DNS responses; they can serve you any content they want over any URL.
- annabellish 9y agoUnless the host you're connecting to has some kind of certificate pinning in play, typing `example.org` into your browser will make the initial request in the clear, which can be hijacked even if it immediately bounces you to https.
- Ajedi32 9y agoThat's true even if the DNS response isn't hijacked though, which was the point of my second paragraph.