As I understand it if someone is able to hack my DNS server and edit my TXT DNS record on a FQDN (fully qualified domain name) they could alter the Monero address that the associated with my OpenAlias and redirect future payments to an address controlled by the attacker.
Is this understanding correct?
Assume that my DNS service is completely separate from the server hosting my Monero daemon and wallet associated with my OpenAlias address. Am I correct that funds received prior to the DNS server hack will remain completely secure?
Are there any other important OpenAlias related security concerns that I should be aware of over and above the normal security precautions associated with running a daemon and receiving Monero payments?