Re: Five Ways to Screw Up SSL

[Valdis.Kletnieks () vt edu]

On Mon, 22 May 2006 12:02:23 EDT, Dude VanWinkle said:

> DNS foo to the client, how easy is that? Would you have to get the
> upstream DNS server to  cache your bogus entry?

You'd be *amazed* how many are still running BIND 4 or 8....

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/