3 ms·
If an attacker can spoof DNS, they can just create A records that point to their own server, and MITM from that. Public key pinning would protect against that
by sbierwagen 12y ago
If an attacker can spoof DNS, they can just create A records that point to their own server, and MITM from that.
Public key pinning would protect against that class of attacks: https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinn...
- StavrosK 12y agoWhose DNS layer? If they own the user's, no. If they own the server's, maybe, if they could convince the CA to sign a certificate they control. Otherwise, they couldn't really do anything.