4 ms·
> The thing is that "control of the DNS" can mean different things. In every way this discussion is related, "control of the DNS" should mean control of the on
by josteink 9y ago
> The thing is that "control of the DNS" can mean different things.
In every way this discussion is related, "control of the DNS" should mean control of the one authoritative DNS source, in a way which means that if a service across the internet requests a DNS record, it won't be affected by whatever DNS-trick your neighbourhood cafe's wifi may apply.
Trying to muddle the discussion of a fairly straight-forward, reliable scenario with consumer-space DNS resolution is IMO not very productive.
- icebraining 9y agoBut that's the point - the CA is needed to make a reliable verification of the data coming from the authoritative DNS source, since the consumer can't make that check themselves in an untrusted network.
- technion 9y agoThe discussion directly relates to a user typing google.com and knowing, via https, that they are talking to Google. The CA preventing the local DNS trick is entirely relevant.