4 ms·
And the DNSSEC is authenticated with how often renewed certificate? If there's no DNSSEC, this is entirely worthless. DNS is very easy to attack.
by AstralStorm 7y ago
And the DNSSEC is authenticated with how often renewed certificate?
If there's no DNSSEC, this is entirely worthless. DNS is very easy to attack.
- tptacek 7y agoCAs are in general CT-logged now, and major sites all monitor the CT logs (hell, even small sites do at this point). If it's so easy to attack DNS to achieve misissuance, why isn't it happening all the time?