Right! Same thing with trusting a site just because it has SSL. All it ensures is that you are having a private conversation. You could be having a private conversation with SATAN.
It's not a phone book. It's a distributed key/value store.
Re:Spoofing DNS with fragments
by ianleeclark on Monday September 10, 2018 @08:30PM
(#17956252)
A phone book is a great analogy?
If you want someone in Berlin, you'd look in a Berlin phonebook; if you want someone in Austin, you'd look in an Austin phonebook. Maybe the underlying storage mechanism doesn't rely on consistent hashing or buckets, but phone books are inherently distributed key/value stores.
Re:Spoofing DNS with fragments
by Dylan16807 on Monday September 10, 2018 @07:48PM
(#17956093)
Phone books also have non-phone information on some entries, but their primary purpose is to get phone numbers. The analogy is fine.
I can go to nearly any house and pick up a phone book and get the equivalent of A records (name to address).
Re:Spoofing DNS with fragments
by ASalazarMX on Monday September 10, 2018 @07:45PM
(#17956077)
A distributed IP book then?
DNS is a reverse phone book. It doesn't matter if the phone book is über-secure. Even if the number you get is really your friend Gary's number, the person who picks up on the other end might not be Gary. Maybe Fred knocked Gary out with a lead pipe and answered the phone. You can't be sure it's Gary talking to you just because the phone number was right.