3 ms·
Not sure. Malicious ISP can forge DNS answers [0], the purpose of DNSSEC is to catch that. [0] https://en.wikipedia.org/wiki/DNS_hijacking#Manipulation_by_ISPs
by auslander 8y ago
Not sure. Malicious ISP can forge DNS answers [0], the purpose of DNSSEC is to catch that.
[0] https://en.wikipedia.org/wiki/DNS_hijacking#Manipulation_by_ISPs https://en.wikipedia.org/wiki/DNS_hijacking#Manipulation_by_...
- tptacek 8y agoFalse. DoH, DNS over TLS, and DNSCrypt/DNSCurve address that problem. DNSSEC does not.