[cabf_validation] Multi-perspective Domain Validation Downgrade Attack Paper

Wayne Thayer wthayer at gmail.com
Mon Dec 13 16:36:15 UTC 2021


The Validation subcommittee has discussed mitigations to DNS hijacking
attacks on domain validation a few times in the past without making much
progress on a policy solution. Some interesting research was recently
published that makes it clear that this problem is not easy to solve:

https://dl.acm.org/doi/pdf/10.1145/3460120.3484815

This might be worth some further discussion on an upcoming Validation
subcommittee call.

Thanks,

Wayne
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20211213/b50eb22d/attachment.html>


More information about the Validation mailing list