3 ms·
Your misunderstanding what DNS(SEC) does. DNS resolves myetherwallet.com to 1.2.3.4. This is valid & signed. Your browser does a request to 1.2.3.4. Attacker n
by dtech 9y ago
Your misunderstanding what DNS(SEC) does.
DNS resolves myetherwallet.com to 1.2.3.4. This is valid & signed. Your browser does a request to 1.2.3.4. Attacker need not interfere with DNS.
Thanks to the BGP leak the attacker controls 1.2.3.4. The request is still going to him.
- briffle 9y agono, in this case, the attackers controlled the IP address of the DNS server, not of 1.2.3.4 (the actual web server) DNSSEC would have prevented you from resolving this invalid domain their fake DNS servers would have tried to send.
- tptacek 9y agoThey controlled that address because they decided to, not because they were limited to it.