Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Universal DNSSEC: Secure DNS for Every Domain. Parent comment
The level of tampering required for the NSA to fake DNSSEC replies is very evident if you have the cert pinned, and very hard to deny.
As things stand, its very easy to deny it was the NSA when anyone and their dog can have access to a CA cert.
There are no comments on this comment yet.
The level of tampering required for the NSA to fake DNSSEC replies is very evident if you have the cert pinned, and very hard to deny.
As things stand, its very easy to deny it was the NSA when anyone and their dog can have access to a CA cert.