is it just me or is the scenario he describes fundamentally wrong. if we want to poison 'Bob's' nameserver, we have to get 'Alice' to send a request to the legi

is it just me or is the scenario he describes fundamentally wrong. if we want to poison 'Bob's' nameserver, we have to get 'Alice' to send a request to the legitimite nameserver of victim.com, and then spoof the request to ALICE, not Bob. Its almost as if he's changed the meaning of Alice and Bob in the final scenario.