News for hackers. Stuff that matters.

A comment on My Chromecast Ultra would not start until I began answering 8.8.8.8. Parent comment

Re:My Chromecast Ultra would not start until I began answeri... by belorn on Friday February 15, 2019 @05:12PM (#19175204)
The threat is actually more at IANA than DNS. I would not be surprised if ISP supplied routers would start MITM quad ip DNS servers in order to retake the data and control. A lot of harm will happen if that became standard practice.

DNSSEC do not protect against this.

[ Parent | on HN ]
Re:My Chromecast Ultra would not start until I began answeri... by lukeschlather on Friday February 15, 2019 @10:32PM (#19176881)
Would that break DNSSEC?
[ Parent | on HN ]
Re:My Chromecast Ultra would not start until I began answeri... by belorn on Saturday February 16, 2019 @11:32AM (#19179354)
No. DNSSEC makes sure that the record is correct as given by the authoritative DNS server. It does not specify or control who resolved the name and for whom.
[ Parent | on HN ]