2 ms·
There are several kinds of MITM. DNSSEC makes rebinding, poisoning and DNS interception for capturing and modifying traffic neutered. Being a protocol it is how
by xorcist 7y ago
There are several kinds of MITM. DNSSEC makes rebinding, poisoning and DNS interception for capturing and modifying traffic neutered. Being a protocol it is however ineffective against other attacks such as unauthorized domain transfers.
What artursapek describes is probably that, while you are of course correct that no improved encryption could possibly improve on the fact that web browsers still default to unencrypted communications.
So the problems are mostly complementary, but rebinding and poisoning offers an attacker more ways of intercepting cleartext traffic unless mitigated.