News for hackers. Stuff that matters.

A comment on Mastodon.technology Shutdown. Parent comment

Re:Mastodon.technology Shutdown by jefftk on Friday October 07, 2022 @11:00AM (#33122267)
It does sort of involve crypto: if the page you control weren't served over HTTPS it wouldn't be too hard (DNS poisoning) for someone else to trick a server into verifying the wrong user.
[ Parent | on HN ]
Re:Mastodon.technology Shutdown by account42 on Monday October 10, 2022 @06:35AM (#33149781)
If DNS poisoning is so easy why don't you perform the same attach on Let's Encrypt since that also uses plain HTTP.
[ Parent | on HN ]
Re:Mastodon.technology Shutdown by jefftk on Monday October 10, 2022 @06:54AM (#33149892)
Certificate Authorities are extremely careful about DNS (and BGP hijacking), more so than basically everyone else.
[ Parent | on HN ]