4 ms·Usually you still have CA -> DNS server being subject to MitM, unless you enforce DNSSEC.by 3np 4y agoUsually you still have CA -> DNS server being subject to MitM, unless you enforce DNSSEC.