News for hackers. Stuff that matters.

A comment on Ask HN: Cloudflare broke my domain's DNSSEC making it unreachable since 4 days. Parent comment

Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by sunaurus on Tuesday May 17, 2022 @08:49AM (#31409751)
Random examples of MITM attacks I could do on a read-only website:

* Inserting malicious JavaScript

* Changing content on trusted websites in order to mislead people

* Replacing downloadable application binaries with versions that contain malicious code

[ Parent | on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by the8472 on Tuesday May 17, 2022 @12:41PM (#31413219)
Malicious JS can be served directly, e.g. via ad iframes. Injecting it into a low-stakes (read-only) site doesn't gain much, does it?

Points 2 and 3 are the same, they're about integrity which could be had cheaper with content-addressing (hashes uniquely identifying the content) rather than pulling in the full TLS+CA machinery.

[ Parent | on HN ]