| |||||||||||||
SSL fix flags forged certificates before they're accepted by browsers (Ars Technica)SSL fix flags forged certificates before they're accepted by browsers (Ars Technica)Posted May 26, 2012 11:16 UTC (Sat) by Cyberax (✭ supporter ✭, #52523)In reply to: SSL fix flags forged certificates before they're accepted by browsers (Ars Technica) by Lennie Parent article: SSL fix flags forged certificates before they're accepted by browsers (Ars Technica)
>There currently is nothing stopping the root from removing .se or taking over .se completely with new nameservers (and removing DNSSEC or replacing it with a new DNSSEC key).
I've specifically said that there are no _practical_ attacks. Completely taking over a domain of a sovereign state is not practical and it won't be covert.
(Log in to post comments)
SSL fix flags forged certificates before they're accepted by browsers (Ars Technica) Posted May 26, 2012 11:29 UTC (Sat) by Lennie (subscriber, #49641) [Link]
We agree, I was just mentioning there is no technical barrier.
|
|||||||||||||