I'm not qualified to say much about the legal aspects in any country, though the
combination of big companies and technology often makes for a lack of reason in the
judicial world.
But your DNSSEC solution does nothing to protect against the ISP doing a MIM attack.
The scenario I was talking about doesn't depend on DNS forgery at all. That's the
advantage the ISP has that other attackers don't have.
Posted Jan 7, 2008 1:19 UTC (Mon) by copsewood (subscriber, #199)
[Link]
If DNSSEC secures the DNS and DNS domain registration includes provision of certificates this
makes having certificates as routine as registering a domain.
Man in the middle
Posted Jan 7, 2008 2:10 UTC (Mon) by rfunk (subscriber, #4054)
[Link]
Sorry, you're apparently still not understanding my point. Or I'm not getting yours. Or
both.