Hacker News new | ask | show | jobs
by AnneTheAgile 5452 days ago
Is that an argument for doing googling over https? Or maybe trying to get first usage of the new secured DNS (I apologize I am off-news and don't know how that will be working...)?
2 comments

Not really. The assumption here is that the attacker installed malware on the target computer to get their traffic redirected to the proxy. Once the computer is compromised there are any number of ways to nullify any signing benefits from ssl or dnssec.
You mean DNSSEC? That would protect against cache poisoning but not certain it applies here.