Re:DNS cache poisoning, the Internet attack from 2008, is ba...
by tptacek on Thursday November 12, 2020 @11:46AM
(#25071659)
Probably because DNSSEC is moribund, virtually none of the most popular zones on the Internet are signed despite a decade of deployment effort, the protocol itself doesn't protect end-system lookups (it's a server-to-server protocol), and DNS-over-HTTPS has for the most part eliminated any impetus to deploy it further.
[ Parent
| on HN ]
There are no comments on this comment yet.