Re: [dns-wg] What about the last mile, was: getting DNSSEC deployed

Lutz Donnerhacke wrote:

* Yuri Demchenko wrote:

...

What does DNSSEC and Techsec-WG people think about recently revealed pharming attack technique that is based on the end user DNS altering?

If you use a validating resolver on your end side, DNSSEC detects and prevents this attack.

How? As I understood, the idea of the attack is to change DNS, not to poison it.