Re:Using DNSSEC and DNSCrypt in Debian
by zimbatm on Tuesday April 26, 2016 @05:38AM
(#11570502)
Where does your local DNS cache gets the record from ? Unless you can verify the information is legit it actually aggravates the problem. Now any MITM can poison your computer for the duration of the cache TTL whereas before they had to maintain the MITM or poison upstream for the same effect.
[ Parent
| on HN ]
There are no comments on this comment yet.