News for hackers. Stuff that matters.
Re:ICANN urges adopting DNSSEC now by xeeeeeeeeeeenu on Saturday April 20, 2019 @06:25PM (#19709280)
No, it does not protect from that. Stub resolvers (i.e. DNS clients) fully trust recursive resolvers by design and don't validate DNSSEC signatures.

In theory the client can validate them but, for various reasons, pretty much none of the implementations do that.

There are no comments on this comment yet.