2 ms·
This is described as an attack on DNS. DNSSEC protects again these kinds of attacks. If you then want to use the IP address to connect to a web server, then yo
by phicoh 7y ago
This is described as an attack on DNS. DNSSEC protects again these kinds of attacks.
If you then want to use the IP address to connect to a web server, then you can use TLS. Which, in the case of letsencrypt, again depends on DNS to prevent issuing a certificate to the wrong party.
So if you start with securing DNS, then you can bootstrap from that into securing higher level protocols.
At the moment there is no practical technique to prevent route hijacks using BGP. So it is best to consider that insecure.