32 ms·
Silly me for expecting an anti-virus company to care about security. The point remains: DNSSEC COULD make this safe to do.
by mrweasel 3y ago
Silly me for expecting an anti-virus company to care about security. The point remains: DNSSEC COULD make this safe to do.
- tptacek 3y agoThe best-resourced, most widely respected security teams on the Internet tend strongly not to enable DNSSEC or advocate for its adoption, mostly because it doesn't solve meaningful problems.
- devrand 3y agoIt would still be prone to DoS though. The request is unencrypted so a MITM could just not respond to those requests. This would effectively block clients from being able to update/get new definitions.
- mike_d 3y agoDNSSEC failures result in denial of service. Turning it on in no way makes the experience safer for an end user.