3 ms·
Isn’t dns hijacking a major problem? I could go to a Starbucks and setup my own dhcp server on my laptop. A certain fraction of the WiFi devices would probably
by donttrack 8y ago
Isn’t dns hijacking a major problem? I could go to a Starbucks and setup my own dhcp server on my laptop. A certain fraction of the WiFi devices would probably pick up my dhcp given dns which would reroute requests to my own dns server. Nobody would ever know... or am I misunderstanding something about https?
Or if I was a malware writer I would discretely target hosts files or the local dns configuration - exploits in certain routers to try to reconfigure the complete local network and such.
- hyperpower 8y agoYou are missing something about HTTPS: you can't produce a valid certificate for the site you're trying to impersonate, and therefore users would notice. HTTPS operates on the assumption that DNS is insecure.
- hoschicz 8y agoThat would only work for websites that do not use HSTS.
- jmanderley 8y agoLet's hope your local Starbucks has device isolation enabled so that isn't possible.
- donttrack 8y agoI will find out and report back.