3 ms·
no, in this case, the attackers controlled the IP address of the DNS server, not of 1.2.3.4 (the actual web server) DNSSEC would have prevented you from resolvi
by briffle 9y ago
no, in this case, the attackers controlled the IP address of the DNS server, not of 1.2.3.4 (the actual web server)
DNSSEC would have prevented you from resolving this invalid domain their fake DNS servers would have tried to send.
- tptacek 9y agoThey controlled that address because they decided to, not because they were limited to it.