Duck DNS – About

Re:Duck DNS – About by ignoramous on Friday October 28, 2022 @04:49AM (#33369112)

> They don’t get traffic going through them.

A rouge DNS can reply to select queries with the IP of a middleware that can TLS proxy and/or MitM that traffic.

We built such a thing mostly for anti-censorship purposes (bypass IP blocks): https://github.com/celzero/midway#demo

[ Parent | on HN ]

Re:Duck DNS – About by wink on Friday October 28, 2022 @05:20AM (#33369290)

I use duckdns and the only service I'm accessing through that CNAME is ssh, which checks host keys, so it doesn't have to be a problem.

[ Parent | on HN ]

Re:Duck DNS – About by drexlspivey on Friday October 28, 2022 @10:49AM (#33372031)

wouldn’t that invalidate the cerificate?

[ Parent | on HN ]

Re:Duck DNS – About by piperswe on Friday October 28, 2022 @11:13AM (#33372406)

If they control the domain, they can get a new valid certificate

[ Parent | on HN ]