Comment by EE84M3i
9 months ago
I think more relevantly than DNSSEC, couldn't they issue TLS certificates using DNS-01 validation? You have to trust your DNS registry.
9 months ago
I think more relevantly than DNSSEC, couldn't they issue TLS certificates using DNS-01 validation? You have to trust your DNS registry.
They could, but WebPKI things get logged, doing split-horizon DNS for your victims doesn't.