4 ms·
HTTPS will protect you against hijacked DNS requests as well.
by Liquid_Fire 7y ago
HTTPS will protect you against hijacked DNS requests as well.
- dijit 7y agoNot by itself, if you have special HTTP headers it will. But some of those are deprecated (HPKP; for example)[0] [0]: https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browser_support_and_deprecation https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browse...
- Liquid_Fire 7y agoIf you hijack the DNS request and respond with the IP of a different server, that server will not have a valid certificate for the domain in question. Why are any extra features required?