[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
A Deep Dive on the Recent Widespread DNS Hijacking
- Subject: A Deep Dive on the Recent Widespread DNS Hijacking
- From: johnl at iecc.com (John Levine)
- Date: 26 Feb 2019 11:12:26 -0500
- In-reply-to: <CAD6AjGTBNZ8wTv6Y1KgTvNaW6Zi87RLprQK2Lg=d0evK8ot7=g@mail.gmail.com>
In article <CAD6AjGTBNZ8wTv6Y1KgTvNaW6Zi87RLprQK2Lg=d0evK8ot7=g at mail.gmail.com> you write:
>Swapping the DNS cabal for the CA cabal is not an improvement. Right? They
>are really the same arbitraging rent-seekers, just different layers.
The models are different. If I want to compromise your DNS I need to
attack your specific registrar. If I want a bogus cert, any of the
thousand CAs in my browser will do.