undefined | Better HN

0 pointsLiquid_Fire6y ago0 comments

HTTPS will protect you against hijacked DNS requests as well.

0 comments

Not by itself, if you have special HTTP headers it will. But some of those are deprecated (HPKP; for example)[0]

[0]: https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browse...

If you hijack the DNS request and respond with the IP of a different server, that server will not have a valid certificate for the domain in question. Why are any extra features required?

j / k navigate · click thread line to collapse

0 comments

dijit6y ago

Not by itself, if you have special HTTP headers it will. But some of those are deprecated (HPKP; for example)[0]

[0]: https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browse...

Liquid_FireOP6y ago

If you hijack the DNS request and respond with the IP of a different server, that server will not have a valid certificate for the domain in question. Why are any extra features required?

j / k navigate · click thread line to collapse