4 ms·
Don't rely on DNS for security. DNS is a reverse phone book. It doesn't matter if the phone book is über-secure. Even if the number you get is really your frie
by peterwwillis 8y ago
Don't rely on DNS for security.
DNS is a reverse phone book. It doesn't matter if the phone book is über-secure. Even if the number you get is really your friend Gary's number, the person who picks up on the other end might not be Gary. Maybe Fred knocked Gary out with a lead pipe and answered the phone. You can't be sure it's Gary talking to you just because the phone number was right.
- jedisct1 8y agoIt's not a phone book. It's a distributed key/value store.
- ASalazarMX 8y agoA distributed IP book then?
- Dylan16807 8y agoPhone books also have non-phone information on some entries, but their primary purpose is to get phone numbers. The analogy is fine.
- gerdesj 8y agoI can go to nearly any house and pick up a phone book and get the equivalent of A records (name to address).
- ianleeclark 8y agoA phone book is a great analogy? If you want someone in Berlin, you'd look in a Berlin phonebook; if you want someone in Austin, you'd look in an Austin phonebook. Maybe the underlying storage mechanism doesn't rely on consistent hashing or buckets, but phone books are inherently distributed key/value stores.
- deytempo 8y agoRight! Same thing with trusting a site just because it has SSL. All it ensures is that you are having a private conversation. You could be having a private conversation with SATAN.