Hacker News new | ask | show | jobs
by eh78ssxv2f 2213 days ago
Agreed. In my mind, if the server is using plain HTTP, and the attacker has control over parts of the network, then plain-old DNS is not the only attack model. The attacker does not need to hack DNS, they can just manipulate the content on the wire.