Say “No” to DNS Spoofing with OpenWeb Network!

OpenWeb Team
OpenWeb Network
Published in
2 min readMar 14, 2019

Almost a year ago, the famous MyEtherWallet (MEW) DNS spoofing attack happened in which hackers stole almost 215 Ether in less than 3 hours. The popular web-based cryptocurrency wallet suffered a DNS Spoofing/Phishing attack that re-routed unsuspicious users to a Russian scam site which then prompted victims to feed their login credentials.

How DNS Poisoning/Spoofing Works?

DNS converts machine-readable IP addresses like http://12.321.525.71 to human readable words such as “https://openweb.network.” DNS takes a name (e.g. openweb.network) and looks at the locally configured ‘Nameservers’ for the ‘answer’ to the question: What is the IP address of openweb.network? And when an answer is found, it is passed back to the client requesting it.

Since DNS emerged during a time where ‘real-time’ processing of information was not possible, to improve performance and scalability, the system was designed to log DNS answers into a locally stored database or ‘cache’ on the DNS server that issues the query. These DNS caches can be the weakest point of the network.

DNS phishing attacks target ‘Authoritative Name Server’ and a weak point of the system hosting the cache DNS answers. Without much effort, hackers can adjust the cache of that DNS server, and begin pointing traffic from a specific website to anywhere else on the internet.

Why OpenWeb Network is Immune to DNS Spoofing attacks?

OpenWeb Network is built on decentralized Ethereum Blockchain. Firstly, all domain names on OpenWeb Network are stored on Ethereum smart contract and trying to manipulate that will be next to impossible due to the decentralized nature of Ethereum blockchain. Moreover, all the websites on OpenWeb Network are stored on multiple nodes on the OpenWeb Network and all the content delivered on the network is secured with hashing. Therefore, all the man-in-the-middle attacks associated with positioning of the cache present in traditional DNS does not exist on OpenWeb Network.

Proving secure web access, OpenWeb will allow users to access websites with more confidence. Install OpenWeb browser extension and start accessing decentralized website on OpenWeb Network.

To get regular updates, you can follow the project on twitter and telegram.

--

--