nihilus

About me

Developer Information
Name nihilus
User since January 9, 2012
Number of add-ons developed 0 add-ons
Average rating of developer's add-ons Not yet rated

My Reviews

DNSSEC Validator

Rated 3 out of 5 stars

The overall idea of this plugin is good and urgently needed. Also, I like the simple user interface abstraction it provides.

However, there are one and a half major downsides to this Addon. The first and most important is: It does not integrate well with proxies or Tor(button). If you use a proxy or Tor, this plugin will leak which sites you are surfing to. This seems to be because of problem number 2, which might also be due to Mozilla Firefox itself: it seems that the plugin does not actually modify the DNS queries of Firefox, but that it later does a DNSSEC enabled DNS query for the same hostname and verifies that. If it was integrated (I wonder if the current Firefox API would permit that), the first problem would not occur. Also, there would be much less DNS traffic from Firefox. And I wonder: If there is an attack on DNS which redirects my request to a malicious host: will the Validator recognize this and stop the request in time before e.g. a session cookie is sent?