Spoofing DNS with fragments

Re:Spoofing DNS with fragments by tptacek on Monday September 10, 2018 @08:45PM (#17956338)

Can't. But if I've given the impression that the majority of CAs are sophisticated, that wasn't intentional.

[ Parent | on HN ]

Re:Spoofing DNS with fragments by tialaramex on Monday September 10, 2018 @09:36PM (#17956563)

So to be clear:

You say DNSSEC validation is "too broken" for any public CA to be doing that, but actually the largest (by issuance volume) does exactly that

Whereas you say multi-perspective is so prevalent "many of them" do it, but you aren't able to produce any examples at all.

Maybe time for a re-think?

[ Parent | on HN ]

Re:Spoofing DNS with fragments by tptacek on Monday September 10, 2018 @09:38PM (#17956569)

I do not understand your argument at all, sorry.

[ Parent | on HN ]

Re:Spoofing DNS with fragments by JdeBP on Tuesday September 11, 2018 @09:54AM (#17959693)

tialaramex is mis-reading "do not as a rule" as "never" and then constructing a straw man based upon that, and is also asking you to specifically name any CA that does what you say many of them do. (-:

[ Parent | on HN ]