11–15 of 15 posts
Get a cheap VPS for a few bucks a months and "apt install bind9". You can create any kind of records you want, and have whatever logging you want.
Tbh I think it's beyond reasonable to expect when you're paying for a service that your data (or your clients') isn't funneled into another sideline. And this particular question is great timing for me, so I hope you don't mind me doing a bit of market research and get your feedback on a few things. - Is this for personal domains or commercial? - Are the clients 'sensitive' or do you want to protect PII out of princi…
- Both
- Both
- Yes. I wish that weren't the case, but considering that I can't find a single provider so far who respects end user privacy, I would expect for one who does so to charge more.
- No. Ideally, the provider wouldn't keep any logs, so they wouldn't be aware that the same client was making a subsequent request.
- I guess it's completely up to the provider. As this would be the first privacy-respecting provider, they'll probably have to go all-in with privacy, if they wish to gain traction and popularity within the community. So no, I'd personally hope that they wouldn't do that. However if this were an existing provider hoping to start becoming more private, yet they also have current customers for whom these features matter, then I guess workarounds like this are better than not being able to transition to better privacy in general. Or, even better, offer features like this for customers who need it, but allow them to be disabled from account settings for those who don't want it.
- To me, personally, I do not care at all about metrics. If a client is querying DNS, then it's because they're about to connect to one of my services (leaving cyberattacks out of the picture for the moment), at which point if I wanted to (which I don't) I could collect metrics. That being said, I don't think that, for those who want it, collecting generalized metrics at the country level, for example, would be unreasonable. And other metrics, such as DNS routing based on server "health checks" or number of resolution errors, etc. aren't bad either. It's just imperative that when the company collects these generalized metrics, they have a clear and perfect process of purging the metrics of all PII, and only saving the country name from which the request originated, for example.
No problem!
Get a cheap VPS for a few bucks a months and "apt install bind9". You can create any kind of records you want, and have whatever logging you want.
Yeah, that's what I currently do. However as traffic grows in both volume and origin, and can be hard (and expensive) to keep up. That's why a privacy-respecting provider who already has the infrastructure would be ideal.
Anycast, gslb behavior, standard records, short logging, probably UltraDNS or maybe Dyn if you don't mind that Oracle purchased them. I don't know what you mean by cost effective. All the commercial providers can get expensive depending on how heavily requested your DNS records are. You would need to negotiate pricing. As for log retention, regardless of vendor that is something you would have to get them to put in w…
That's a good point. It wouldn't be the first time that providers (most notably VPN providers) have lied about their logging policies with devastating consequences for the end user while they get off scott free. Getting something in writing would be ideal, however I'm not sure I'm big enough yet to work out a custom deal like that with a major provider. Thank you for pointing that out, though.
Tbh I think it's beyond reasonable to expect when you're paying for a service that your data (or your clients') isn't funneled into another sideline. And this particular question is great timing for me, so I hope you don't mind me doing a bit of market research and get your feedback on a few things. - Is this for personal domains or commercial? - Are the clients 'sensitive' or do you want to protect PII out of princi…
Sure! - Both - Both - Yes. I wish that weren't the case, but considering that I can't find a single provider so far who respects end user privacy, I would expect for one who does so to charge more. - No. Ideally, the provider wouldn't keep any logs, so they wouldn't be aware that the same client was making a subsequent request. - I guess it's completely up to the provider. As this would be the first privacy-respectin…