[mikepurvis]

DHCP servers can command your dns config and hostname too. It's not a total mitm story since the certs are still on the machine itself but it's definitely more than just a local IP address.

[growse]

The don't really 'command' it, they 'suggest'. The client's free to ignore those suggestions :)