4 ms·
DNS hijacks at routing level are not common. But they do happen: https://www.theregister.co.uk/2018/04/24/myetherwallet_dns_hijack/ https://www.theregister.co.u
by phicoh 8y ago
DNS hijacks at routing level are not common. But they do happen: https://www.theregister.co.uk/2018/04/24/myetherwallet_dns_hijack/ https://www.theregister.co.uk/2018/04/24/myetherwallet_dns_h...
DNSSEC fully supports DNSSEC validation on the host. So the main reason you have to trust your ISP's recursive resolvers is that software vendors, in particular browser vendors, don't want to do DNSSEC validation.
Of course you can run your own local validating resolver.
- tptacek 8y agoAn attacker that controls routing can bypass the DNS entirely, so it's hard to see how protecting the DNS from that attacker serves any meaningful purpose.