Answer the question
In order to leave comments, you need to log in
Are there addresses from the list of Roskomnadzor signed by dnssec?
Good time.
I set up bind and try to get it to check dnssec. Accordingly, my provider filters requests to global dns, returning the ip of its own ns-server, which subsequently issues the IP of its own server to all requests to blocked addresses. That is, it performs a MITM attack.
From my understanding, this should not be possible using dnssec. However, again, as I understand it, dnssec for this must be enabled on the "blocked" addresses themselves.
Which begs the question, does anyone know any dnssec-signed stoplist addresses?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question