4 ms·
This is what multi perspective helps with. It doesn’t mitigate every single attack. But think about what DANE is for a second. If a bad actor is MITMing your c
by aaomidi 1y ago
This is what multi perspective helps with. It doesn’t mitigate every single attack.
But think about what DANE is for a second. If a bad actor is MITMing your connection to some endpoint, they certainly can MITM your DNS queries too.
- ocdtrekkie 1y agoMulti-perspective helps prevent MITM, it doesn't provide any better security than your domain and DNS provider's security. It's just another layer to patch over the bad idea of CAs in the first place.
- crote 1y agoIt's a completely different attack scenario. DANE isn't going to be of any value when an attacker is sitting between the end user and their ISP - which was already the requirement for compromising the TLS connection in the first place - as they could just strip DNSSEC and fake the DANE records.