Sujet : Re: [LINK] Calling time on DNSSEC?
De : gtaylor (at) *nospam* tnetconsulting.net (Grant Taylor)
Groupes : comp.miscDate : 05. Dec 2024, 02:19:55
Autres entêtes
Organisation : TNet Consulting
Message-ID : <viqv3r$l6j$1@tncsrv09.home.tnetconsulting.net>
References : 1 2 3 4 5 6 7 8
User-Agent : Mozilla Thunderbird
On 12/4/24 02:39, Richard Kettlewell wrote:
Better than nothing, although in many cases I’d expect that traffic analysis could be used to narrow down which site was being visited even without name information being available.
Yes, traffic analysis can infer and / or interfere with things.
There's also domain fronting. }:-)
If there’s multiple sites served by a single IP address then the attack can just indiscriminately block all of them. Encrypting name information can’t prevent that.
Quite ;-)
-- Grant. . . .
[LINK] Calling time on DNSSEC?
Re: [LINK] Calling time on DNSSEC?