3 ms·
Preface: I'm moderately technical but don't understand the specific nuances of DNS. Is there any possibility Pi-Hole and the DNS server plus hosts file could b
by froindt 7y ago
Preface: I'm moderately technical but don't understand the specific nuances of DNS.
Is there any possibility Pi-Hole and the DNS server plus hosts file could be used in an attack? Could I setup a web server with identical UI to my target site, get one of the list providers to direct chase.com to my IP, list gets propagated to all Pi-Hole devices, and start collecting credentials?
- wnissen 7y agoAt the moment, if an attacker has control of your DNS, it's game over before you even start. There are some technologies that help, such as secure DNS (DNSSEC) and "certificate pinning" but they don't do everything.
- tptacek 7y agoIn the case of DNSSEC, it doesn't do anything in this scenario, for two reasons: first, and most importantly, virtually nobody uses it (for instance, like almost every tech company as well, CHASE.COM isn't DNSSEC-signed and isn't likely to do so), and secondly because DNSSEC protects only server-to-server lookups and not client-server lookups, so if your Pi-Hole picks up a bad record somehow, DNSSEC isn't going to keep your browser from detecting that.