Comment by cangeroo

Could DNS responses have been hijacked as well?

Edit: Could this have been used to hijack/create TLS certificates?