I have TLS installed for a website, does it matter if DNSSEC is enabled for this domain or there is no real need for that then?


1 Answer 1


Check out Cloudflare: How DNSSEC works - they do a great write up on this and why its important. If you are concerned about providing a secure experience to your end users, or use your domain to provide email services that you send or receive from. DNSSEC would be a good (and easy to setup) choice for you.

  • 1
    Thank you, but my question then is, if I am using a TLS certificate but the DNS was altered for user to point to a fraud server, wouldn't that show a broken SSL flag on the browser? if not blocking access entirely in modern browsers. Oct 25, 2018 at 16:18
  • Ah! you are part of today's lucky 10,000! Allow me to introduce you to: github.com/kgretzky/evilginx2 A MITM attack that uses valid SSL certs and steals the data to then be used by the attacker while delivering you the CORRECT AND REAL websites you were attempting to access.
    – Matt
    Oct 25, 2018 at 16:26
  • Bit late to the party, but evilginx2 isn't really relevant here since it's really an automated phishing tool; even with properly set up TLS/SSL and DNSSEC your users would still be vulnerable since evilginx2 uses the attacker's domain.
    – adrian
    May 5, 2022 at 2:34

Not the answer you're looking for? Browse other questions tagged .