DNSSEC Downgrade Attacks

DNSSEC Downgrade Attacks

Explore a critical vulnerability in DNSSEC's cryptographic agility through this 26-minute Black Hat conference talk. Learn how adversaries can manipulate cryptographic material in signed DNS responses to reduce DNSSEC security levels or prevent resolvers from validating DNSSEC entirely. Presented by Elias Heftrig, Haya Shulman, and Michael Waidner, the talk delves into the implications of this security flaw and its potential impact on DNS security.