I have TLS installed for a website, does it matter if DNSSEC is enabled for this domain or there is no real need for that then?

marked as duplicate by Steffen Ullrich tls Oct 25 '18 at 16:25

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


Check out Cloudflare: How DNSSEC works - they do a great write up on this and why its important. If you are concerned about providing a secure experience to your end users, or use your domain to provide email services that you send or receive from. DNSSEC would be a good (and easy to setup) choice for you.

  • 1
    Thank you, but my question then is, if I am using a TLS certificate but the DNS was altered for user to point to a fraud server, wouldn't that show a broken SSL flag on the browser? if not blocking access entirely in modern browsers. – Motaz M. El Shazly Oct 25 '18 at 16:18
  • Ah! you are part of today's lucky 10,000! Allow me to introduce you to: github.com/kgretzky/evilginx2 A MITM attack that uses valid SSL certs and steals the data to then be used by the attacker while delivering you the CORRECT AND REAL websites you were attempting to access. – Matt Oct 25 '18 at 16:26

Not the answer you're looking for? Browse other questions tagged or ask your own question.