4 ms·
No, attacker can just MITM your DNS traffic and synthesise lots of typosquats of their own. They can't do the actual bigbank.com or facebook.com domains thanks
by _-___________-_ 7y ago
No, attacker can just MITM your DNS traffic and synthesise lots of typosquats of their own. They can't do the actual bigbank.com or facebook.com domains thanks to various protections like HSTS, but typos are unlikely to have HSTS preload etc, and they can have vast numbers of them at basically zero cost.