4 ms·
Can't an ISP's DNS server tell you that https://www.google.com https://www.google.com is at 10.10.10.10? And that is an internal server hosting whatever ISP wan
by dingo_bat 9y ago
Can't an ISP's DNS server tell you that https://www.google.com https://www.google.com is at 10.10.10.10? And that is an internal server hosting whatever ISP wants.
- Franciscouzo 9y agoThey can, but you will get a certificate error, because the ISP doesn't has a valid certificate for the domain.
- rhencke 9y agoExactly. It will show up in any modern browser with a big red "This site is not safe!" type of message if that was to happen. This is one of the reasons Google (and others) so proactively protect the certificate infrastructure so meticulously, and run efforts like https://www.certificate-transparency.org/ https://www.certificate-transparency.org/
- IncRnd 9y agoYes, and that is an argument for https with certificates...