spoofing a domain to give the wrong key must be a thing

Reply to this note

Please Login to reply.

Discussion

Isn't that already a problem with the current system? It's already based on DNS, like almost everything on the internet, just with the extra step of a webserver.

I imagine DNSSEC could solve much of that.

Yeah, the current approach is already entirely reliant on DNS security, so OpenAlias would have the same concerns (and solution in DNSSEC) while removing the hosting/infrastructure requirements.

not exactly because a signed note defines the id at the domain, only thing missing is the proof at the domain also being signed