11 ms·
I think more relevantly than DNSSEC, couldn't they issue TLS certificates using DNS-01 validation? You have to trust your DNS registry.
by EE84M3i 2y ago
I think more relevantly than DNSSEC, couldn't they issue TLS certificates using DNS-01 validation? You have to trust your DNS registry.
- Avamander 2y agoThey could, but WebPKI things get logged, doing split-horizon DNS for your victims doesn't.