3 ms·
No, it does not protect from that. Stub resolvers (i.e. DNS clients) fully trust recursive resolvers by design and don't validate DNSSEC signatures. In theory
by xeeeeeeeeeeenu 8y ago
No, it does not protect from that. Stub resolvers (i.e. DNS clients) fully trust recursive resolvers by design and don't validate DNSSEC signatures.
In theory the client can validate them but, for various reasons, pretty much none of the implementations do that.