[Cryptography] Against against DNS (Re: New SSL/TLS certs to each live no longer than 47) days by 2029

[jrzx]

DNS is inherently vulnerable to governments hijacking domain names, and it is a big problem.  It would seem also inherently vulnerable to man in the middle attacks, but this does not seem to be a problem.  What prevents that from being a problem?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: publickey - jrzx at protonmail.ch - 0x4B137C8A.asc
Type: application/pgp-keys
Size: 1718 bytes
Desc: not available
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20250505/5cf57da9/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 603 bytes
Desc: OpenPGP digital signature
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20250505/5cf57da9/attachment.sig>