4 ms·
I assume he does not want support. He wants to highlight a threat to DNS choice.
by Aiphie3E 8y ago
I assume he does not want support. He wants to highlight a threat to DNS choice.
- belorn 8y agoThe threat is actually more at IANA than DNS. I would not be surprised if ISP supplied routers would start MITM quad ip DNS servers in order to retake the data and control. A lot of harm will happen if that became standard practice. DNSSEC do not protect against this.
- lukeschlather 8y agoWould that break DNSSEC?
- belorn 8y agoNo. DNSSEC makes sure that the record is correct as given by the authoritative DNS server. It does not specify or control who resolved the name and for whom.