An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
Page 2 of 2 1 2
Re: DNSCrypt (Preview Release)
artie505 #20888 02/28/12 12:00 PM
Joined: Aug 2009
Likes: 1
Offline

Joined: Aug 2009
Likes: 1
The server key is the key that DNScrypt uses in order to create a secure connection with the domain name servers. Periodically refreshing it is a way to make sure it has not been tampered with or revoked.

If hackers were able to forge a security certificate, they could use it for what's called a "man in the middle attack," tricking your computer into talking to their server rather than the legitimate DNS server, then passing on your computer's traffic to the real server while they eavesdrop on what's going on.

Should something like that happen--which is extraordinarily unlikely--the certificate that your computer has a copy of would be revoked and a new security certificate issued. By fetching a new certificate periodically, your computer can be sure that the certificate it has is valid and hasn't been compromised or revoked.

Having said that...once an hour is an excess of caution.


Photo gallery, all about me, and more: www.xeromag.com/franklin.html
Re: DNSCrypt (Preview Release)
tacit #20897 02/28/12 03:08 PM
Joined: Aug 2009
Likes: 15
OP Online

Joined: Aug 2009
Likes: 15
I won't complain about overkill.

Thanks.


The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire
Page 2 of 2 1 2

Moderated by  alternaut, dianne, MacManiac 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.4.33 Page Time: 0.014s Queries: 19 (0.011s) Memory: 0.5778 MB (Peak: 0.6449 MB) Data Comp: Zlib Server Time: 2024-04-19 19:10:19 UTC
Valid HTML 5 and Valid CSS