DNS hijack?

Rubens Kuhl rubensk at gmail.com
Fri Nov 12 23:08:12 UTC 2021


>
>
>
>
> DNSSEC would help here.   NetSol's rogue nameserver wouldn't be able to
> produce
> the signed zone if validation were required.
>
>
Nope, they could just remove the DS since they are the registrar for that
domain. DNSSEC only protects against a DNS provider going rogue, not your
own hired registrar.


Rubens
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20211112/098515a6/attachment.html>


More information about the NANOG mailing list