8 ms·
> if DNSSEC had been in place and Gaddafi had control of bit.ly's TLS keys? But Gaddafi was already in control of all Libyan ISPs and the .ly ccTLD. Why would
by dane-pgp 6y ago
> if DNSSEC had been in place and Gaddafi had control of bit.ly's TLS keys?
But Gaddafi was already in control of all Libyan ISPs and the .ly ccTLD. Why would DNSSEC have made his job any easier?
Also, surely Facebook was more instrumental in the Arab Spring than bit.ly was.[0] If anything, the lack of DNSSEC made it easier for Gaddafi to spoof DNS results for facebook.com and other sites.
[0] https://en.wikipedia.org/wiki/Social_media_and_the_Arab_Spring https://en.wikipedia.org/wiki/Social_media_and_the_Arab_Spri...
- tptacek 6y agoGaddafi was not, to my knowledge, in control of any WebPKI CA=True certificates.
- dane-pgp 6y agoObviously for facebook.com he would only be able to serve an unencrypted HTTP version (and HSTS-preloading would prevent that working in most cases), but by controlling the .ly ccTLD he could acquire TLS certificates for any "national" site. I'm not sure if any of that is relevant, though.
- tialaramex 6y agoFor what it's worth this Gaddafi -> Libya -> bit.ly connection has to be one of the weirdest beliefs you've exhibited over a long period. At first I thought it was just an extended bit, like the whole Cody Johnston "teleporting boars" thing [0] But I don't think it can be, I think you're serious and er, that's not great basically. Maybe take a few minutes to think about it more clearly, discuss it with somebody you trust, and see if you can't figure out where you went wrong. [0] https://twitter.com/drmistercody/status/1046558632878399489 https://twitter.com/drmistercody/status/1046558632878399489
- superkuh 6y agoUm, okay. Who do you think I am?
- tialaramex 6y agoYou're superkuh, but I was replying to tptacek which is to say Thomas Ptacek, who has made this very strange argument multiple times.