> If that brings you comfort, then you should not be comforted as registrars will not do what you're describing. That's not true, just depends on the TLD. > N

> If that brings you comfort, then you should not be comforted as registrars will not do what you're describing. That's not true, just depends on the TLD. > Not to mention that DNS (excluding finnicky DNSSEC) just maps a domain to an IP address. It's not a public key. You could have your connection middlemanned by your ISP or some 3-letter agency and you would be none the wiser. All the actual security is provided by the PKI. PKI you can't trust if nobody can trust the DNS.