|visits||member for||2 years, 4 months|
|seen||Jun 4 at 18:22|
DNSSec (comcast) vs DNSCurve (OpenDNS)
What your saying doesn't seem right for what i understand of DNSSec. I'm not saying i have a thorough understanding because i don't. How would trusting one party make DNSSec obsolete? How would it stop a man-in-the-middle attack? Someone could intercept your dns query and send back an attackers site rather than the correct site. DNSSec not only protects you from their DNS database being injected with invalid entries (which i think is what you are referring to).