logoalt Hacker News

tptacekyesterday at 7:46 PM0 repliesview on HN

The most common vector for DNS-based attacks on issuance is compromised registrar accounts, and no matter how complicated you make the cryptography, if you're layering it onto the DNS, those attacks will preempt the cryptography.