3 ms·
But can’t DNS queries be altered man in the middle style?
by sroussey 6y ago
But can’t DNS queries be altered man in the middle style?
- sleevi 6y agoI’m not sure your point? Any HTTP/ALPN request first begins with DNS, so if you’re trying to compare those, they all share the same base issue. In theory, this can be mitigated by DNSSEC, but that’s not relevant when comparing these validation methods. However, both the HTTP and ALPN methods only demonstrate control over a single port (or .well-known resource), while the DNS method demonstrates the full ability to alter any/all names.
- sroussey 6y agoActually, I suppose DNS with DNSSEC or DNS over HTTPS would be better than any HTTP method.