Hacker News Reader

> Poisoning the DNS subsystem of your computer is not safe. At the very least it could record which requests you made indefinitely. This does need to be fixed.

I'm assuming that if a domain used DNSSEC this would protect the user against this type of attack?

View on HN

If your upstream DNS server and your OS support DNSSEC, it might require small changes to the attack (spoofing IP addresses instead of DNS names).

There really is no substitute for end-to-end crypto in networking.

Reply on news.ycombinator.com