S. Bortzmeyer ✅ utilise mastodon.gougere.fr. Vous pouvez læ suivre et interagir si vous possédez un compte quelque part dans le "fediverse". Si ce n’est pas le cas, vous pouvez en créer un ici.
JP Mens 🔐' @jpmens@mastodon.social

DNS, CDNs and CAs are Achilles' Heel for top sites theregister.co.uk/2018/06/25/w

X_Cli @x_cli@infosec.exchange

@jpmens
I wonder why everybody talks about this paper and completely ignores mine.
sstic.org/media/SSTIC2018/SSTI
Do you have an idea?

S. Bortzmeyer ✅ @bortzmeyer

@x_cli @jpmens Speaking about security, an advice about the suggestion for ? The paper mentions DNSSEC just one, as a possible solution, but it seems to me smartphones typically don't validate, so DNSSEC doesn't really help here.

· Web · 0 · 0
X_Cli @x_cli@infosec.exchange

@bortzmeyer
I agree that DNSSEC seems pretty useless here, because LTE generally would transport data between the stub-resolver and the recursive server. TLS is an appropriate countermeasure
@jpmens

S. Bortzmeyer ✅ @bortzmeyer

@x_cli @jpmens Not TLS alone : TLS + PKIX + HSTS :-)

X_Cli @x_cli@infosec.exchange

@bortzmeyer
No. I meant TLS as in DNS over TLS.
TLS as in WebPKI may ot may not be relevant depending on the Internet service that is used by the phone.
@jpmens

mastodon.gougere.fr propulsé par Mastodon