Tag Info

New answers tagged

1

Even with your own nameserver, you'd be either recursively pulling dns entries from elsewhere or doing your very own mitm zones, which is why dnssec is there. On a related note, looking at the osi model, you could also depend fully on ssl certs on the browser to ensure you don't get redirected to a phishing site of some sort, as a kind of L7 guarantee of ...


0

Cache poisoning by implementing cryptographic signatures for zone transfers. If you wish to encrypt payloads then use IPSec



Top 50 recent answers are included