Why aren't we using digital signatures for the DHCP in order to stop Rouge DHCP attacks?

  • DHCP snooping, dynamic ARP inspection, etc. are easy enough to implement, and you get the benefit of other protections, too. – Ron Maupin Feb 8 '19 at 0:52
  • 1
    With DHCP clients should not need to know anything about the DHCP server. Combining that feature with how validation of digital signatures works is very hard. – Teun Vink Feb 8 '19 at 6:05

Because the risk of a DHCP attack doesn’t outweigh the complexity of implementing digital signatures.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.