L
L
lockywolf2017-01-29 09:16:17
Domain Name System
lockywolf, 2017-01-29 09:16:17

Are there addresses from the list of Roskomnadzor signed by dnssec?

Good time.
I set up bind and try to get it to check dnssec. Accordingly, my provider filters requests to global dns, returning the ip of its own ns-server, which subsequently issues the IP of its own server to all requests to blocked addresses. That is, it performs a MITM attack.
From my understanding, this should not be possible using dnssec. However, again, as I understand it, dnssec for this must be enabled on the "blocked" addresses themselves.
Which begs the question, does anyone know any dnssec-signed stoplist addresses?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question