4 ms·
I hate to break it to you, but why do you think ISPs override the DNS responses with TTL set to 0? TLS itself is only useful if you also rely on DNS over HTTPS
by cookiengineer 4y ago
I hate to break it to you, but why do you think ISPs override the DNS responses with TTL set to 0?
TLS itself is only useful if you also rely on DNS over HTTPS/TLS. Well, setting the issues with TLS 1.2 and earlier aside.
- SquareWheel 4y agoThose are problems too, but they aren't exploited nearly as often as MITMing cleartext has been historically. The solution you mention is already becoming widely-supported, as are newer protocols like QUIC that discourage snooping. There's no reason to ignore a good solution just because it's not 100% perfect.
- Tepix 4y ago> why do you think ISPs override the DNS responses with TTL set to 0 mine doesn't.