Fundamental design flaw in DNSSEC discovered

https://www.athene-center.de/en/news/press/key-trap

by 10000truths • 2 years ago

2 1 2 years ago

"The worst attack on DNS ever discovered."

But it's not an attack on DNS. It's attack on a proposed "extension" that was never ready to be adopted but was revived and pushed out immediately after a 2008 attack on certain DNS software that received much hype, namely, an attack on popular DNS cache software, recursive resolver software, whetever one chooses to call it.

Some software was vulnerable. Some was not. I'm still using the software that was not affected. It isn't affected by "KeyTrap" either.

Like KeyTrap the 2008 vulnerability was not an "attack on DNS" either. It was an attack on certain DNS software.

A flaw in "DNSSEC" or some particular DNS software is not a flaw in DNS.

If the flaw was in DNS itself, then _all_ DNS software, including the software I am using, would be affected. It isn't.

Fundamental design flaw in DNSSEC discovered

Related Stories