View Single Post
Posts: 89 | Thanked: 194 times | Joined on Feb 2010
#6
Originally Posted by shawnjefferson View Post
The operator or ISP can certainly man-in-the-middle your DNS queries (most of the time your using their DNS servers) and deliver whatever IP address they feel like for any name you request. Some do exactly that for non-existent domain names for instance instead of a NXDOMAIN record. There's a high level of trust you have to have in your DNS servers.
DNSSEC is supposed to fix this.

(Damn but it's klunky writing text on a Jolla. Waiting for the Neo900 with bated breath).