• finn@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    Domain registration ≠ internet security. Root of trust is in cryptographic keys, not domains. DNS is not the security cornerstone you make it out to be. PKI says hi!

    • mle@feddit.de
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Yes, but it is very quick and cheap to get a domain validated cert from a CA that is generally trusted by most web browsers, so once the bad actor has the domain, the should be able to trick most users, only maybe certificate pinning might help, but that is not widely used.