News for hackers. Stuff that matters.

A comment on New NSA Leak Shows MITM Attacks Against Major Internet Services. Parent comment

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by jlgaddis on Friday September 13, 2013 @11:35AM (#6381126)
DANE[0] (in combination w/ DNSSEC[1]) is starting to sound really good right about now... except that, you know, the U.S. also runs several root nameservers.

[0]: https://tools.ietf.org/html/rfc6698 [1]: https://en.wikipedia.org/wiki/Domain_Name_System_Security_Ex...

[ Parent | on HN ]
Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by dsl on Friday September 13, 2013 @11:39PM (#6384561)
Root servers simply serve the content for the root zone, ICANN generates the contents of the root zone and signs it using an elaborate system of trust: http://dns.icann.org/ksk/
[ Parent | on HN ]