2 ms·
How does (2) solve the problem? Why wouldn't the attacker just replace the key with their own?
by icebraining 8y ago
How does (2) solve the problem? Why wouldn't the attacker just replace the key with their own?
- dcow 8y agoTo do so they would have to pop the registrar's account/service, not an individual domain owner's.
- icebraining 8y agoHow does the registrar know which key to trust? There must be some way for the domain owner to indicate their key, and to replace it if they lose it; essentially, a website where you login and upload your key, much like you currently login and configure your records.