Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

webcache.googleusercontent.com

Post reply on HN
Print view View original

131–140 of 253 posts

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#131

Post by sm64 »

andypants wrote: post #47
manacit wrote: post #35

Earlier quoted context omitted.

I agree - there are not very many internet-scale (for lack of a better term), completely free and fast DNS servers who have an IP address that's easy to remember. Is that specific? sure, but I'll tell you when I go to set a new system up I'm going to type 8.8.8.8 because it's what comes to my mind.

There is quad9 - 9.9.9.9 :)

Highly recommend Quad9. Their privacy policy is absolutely no identifying data logging, period. They're also the few providers offering DNS over TLS. Google, on the other hand, keeps identifying logs for 24-48 hours.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#132

Post by enzanki_ars »

MrF3ynmann wrote: post #62
pixl97 wrote: post #14

Well crap. I was used to going to 1.1.1.1 on my cellphone when on wireless APs that tried to redirect you an agreement page. Now there is a valid cert/website at that address. Guess I'll have to pick a new one.

Try https://neverssl.com/

I think you meant http://neverssl.com

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#137

Post by edsouza »

nerdbaggy wrote: post #103

Interesting that https://1.1.1.1/ has a valid SSL Cert when you can't issue public valid certs for IPs

The certificate "Common Name" is: dns.cloudflare.com.

There is a certificate extension - Certificate Subject Alternative Name that lists the following:

  DNS Name: *.dns.cloudflare.com
  DNS Name: dns.cloudflare.com
  IP Address: 1.1.1.1
  IP Address: 1.0.0.1
Most likely the extension was included as part of the certificate signing request.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#138

Post by codetrotter »

scrollaway wrote: post #77

So am I correct assuming they support DNSCrypt if they claim they support encryption? If that's the case that's really nice actually. Google DNS kinda silently launched DNS-over-HTTPS in 2016 but still no DNSCrypt; opendns are the only major ones supporting it. Of course I stopped using dnscrypt at some point because it was a pain to maintain, and wasnt supported on most of my devices :/

(Removed.)

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#139

Post by mrb »

bogomipz wrote: post #97
mrb wrote: post #46

Wonder how much it cost Cloudflare to buy 1.1.1.0/8 from China Telecom...

Where did you get China Telecom from? The IANA released 1.0.0.0/8 to APNIC in 2010 and 1.1.1.0/24 was assigned to APNIC-LABS. The IRR Netname is actually still APNIC-LABS too. See: https://stat.ripe.net/1.1.1.1#tabId=at-a-glance

The IANA released 1.0.0.0/8 to APNIC, and APNIC subsequently sold parts of it to China Telecom. I deduct this because neighboring IP ranges (https://stat.ripe.net/1.1.0.0#tabId=at-a-glance and https://stat.ripe.net/1.1.2.0#tabId=at-a-glance) belong to China Telecom. So 1.1.1.0 likely did too. I think the whois information may have reflected the China Telecom ownership before it was updated.

APNIC-LABS is probably just a joint partner in that Cloudflare resolver project.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#140

Post by majewsky »

manacit wrote: post #35
cm2187 wrote: post #33

Earlier quoted context omitted.

To me that’s a diversification away from 8.8.8.8. I am absolutely not criticising google’s DNS, it’s a useful service. But I am happy to get more choice.

I agree - there are not very many internet-scale (for lack of a better term), completely free and fast DNS servers who have an IP address that's easy to remember. Is that specific? sure, but I'll tell you when I go to set a new system up I'm going to type 8.8.8.8 because it's what comes to my mind.

There is a public DNS server at 141.1.1.1 (which I used for connection testing before there was 8.8.8.8 etc.), but I actually do not know by whom it is operated. Whois says Vodafone.
Post reply on HN