This means that an attacker that successfully spoofs DNS resolution have to also develop a legitimate HTTPS connection. This tends to make DNS spoofing as tough and costly as attacking HTTPS commonly. When the attacker spoofs DNS but doesn’t compromise HTTPS, users will get a noteworthy war