30 ms·
If your DNS is compromised SSL and x509 is currently what's protecting your users from a fraudulent site.
by josteink 13y ago
If your DNS is compromised SSL and x509 is currently what's protecting your users from a fraudulent site.
- lawl 13y ago> If your DNS is compromised SSL and x509 is currently what's protecting your users from a fraudulent site. Uhm no? Because you can litterally just buy a new valid cert for it? As long as we're talking Domain Validated. I doubt your average user will notice that there isn't a green bar anymore or that the certificate lacks ownership information.
- astrodust 13y agoIf DNSsec allows your domain's certificate to be signed vs. a more root authority (e.g. .com) then it would be a lot harder to introduce fraudulent DNS records.