3 ms·
It mitigates it in the sense that the attacker presumably wont have the TLS identity required for the client to trust it. The client won't be able to resolve a
by andrewjf 7y ago
It mitigates it in the sense that the attacker presumably wont have the TLS identity required for the client to trust it.
The client won't be able to resolve anything, but it can't be used to send the client to other places, turning it into a denial of service
- megous 7y agoThey can try getting a new DV cert for the domain. It may or may not work depending on how thoroughly the CA checks the domain resolution from multiple places.