News for hackers. Stuff that matters.

A comment on Fedora 21 To Have DNSSEC Validation Enabled By Default. Parent comment

Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by arjie on Friday May 02, 2014 @02:18PM (#7687233)
If bit.ly implemented DNSSEC exactly to spec, and it appears clean to a user, who could be an attacker and in what way?
[ Parent | on HN ]
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by dfc on Friday May 02, 2014 @03:01PM (#7687477)
Anyone can be an attacker that can exert influence (legal/kinetic/digital) over:

  Here:        .
  Here:     .ly.
  Here: .bit.ly.
The attack surface of freebsd.org is similiar except there is a different set of actors that can exert legal influence over .org.

  Here:             .  # G/K/D same as bit.ly
  Here:         .org.  #   K/D same as bit.ly
  Here: .freebsd.org.  #   K/D same as bit.ly
[ Parent | on HN ]