It would be neat if this also recognized that you're hosting your own dns, instead of spitting your own IP back at you. I didn't recognize my IP at first.
Nice idea, and it should be pretty easy to do. Added to the to-do list!
Show HN: Which DNS servers are you pointing to?
51–60 of 97 posts
Re: Show HN: Which DNS servers are you pointing to?
#52I have a local DNS server that forwards over TLS (DoT) to Cloudflare & Quad9, round-robin. Page alternately returns WOODYNET @ rrdns.pch.net and CLOUDFLARENET. I like the pch.net info - it's something about Quad9 I didn't know.
This was a surprise to me as well. For anyone else reading this it means that Quad9, not your system , is relaying DNS traffic to WoodyNet.
PCH provides the infrastructure for Quad9...so I don't think it makes sense to say that Quad9 is "relaying" DNS traffic to PCH/WoodyNet. There isn't some organizational boundary that's being crossed.
Re: Show HN: Which DNS servers are you pointing to?
#53What are the best practices/choices today when choosing your DNS servers when it comes to privacy?
I recommend running your own DNS resolver, so that you don’t have to trust any 3rd party server with your DNS traffic. I run Unbound (a DNS resolver) alongside Pi-hole on a dedicated raspberry pi for my home network.
This is a good solution. Another much lighter-weight solution is to simply add a static name/ip association in your local /etc/hosts file. It's a bit brittle, but honestly for a lot of websites its a lot less brittle than you think (and it's even more efficient than a Pi-hole). The biggest drawback is that you'll have another thing to trouble-shoot if something goes wrong. But that's true for any privacy-preserving DNS solution.
Re: Show HN: Which DNS servers are you pointing to?
#54Unrelated, but I found a typo on this page:
https://resolve.rs/http/myheaders.html
It says:
> These are the HTTP headers that are being sent my your browser.
Great set of tools, BTW.
Re: Show HN: Which DNS servers are you pointing to?
#55Akamai also provides something similar:
* https://developer.akamai.com/blog/2018/05/10/introducing-new...
Re: Show HN: Which DNS servers are you pointing to?
#56Nextdns.io and cloudflare externally. Pi-hole pointing to those internally. Preferably encrypted. Preferably with Firefox due to esni support.
In my case NextDNS shows up as Google, both here and on https://www.dnsleaktest.com/ since they are using GCP.
Re: Show HN: Which DNS servers are you pointing to?
#57Earlier quoted context omitted.
What, exactly, does "sending your IP all around the internet" even mean?
Meaning, if you don't want people to know you are searching for snm.donkeyporn.com than going out to the nameserver that donkeyporn is using is not exactly keeping the information private.
In practice with 1.1.1.1 you're trading the parties who know about your access from:
Donkeyporn's DNS provider, com's DNS provider (0.1% chance it's not already cached), your ISP, transit providers, donkeyporn's ISP, donkeyporn service
To: cloudflare, your ISP, transit providers, donkeyporn's ISP, donkeyporn service
It's not a huge change and it's really about whether you trust CloudFlare more than the service donkeyporn has chosen.
Re: Show HN: Which DNS servers are you pointing to?
#58I'm using 8.8.8.8 and its coming up as cloudflarenet not whatever google should presumably be?
Gosh, I feel old, how do I set DNS servers in Linux these days? I used to just edit /etc/resolv.conf and add 8.8.8.8 to it but now recent distros have "Do not edit." in resolv.conf and don't tell you what to actually edit. Why do they have to do this to us ... things used to be simple.
I don't think resolvectl is less simple, just different. It makes it much easier to realize you've typo'd something, for instance. It also makes it easier to understand what the running config is, as opposed to the old "read a bunch of text files and hope they haven't been edited since the daemon was hup'd".
https://wiki.archlinux.org/index.php/Systemd-resolved#Settin...
Re: Show HN: Which DNS servers are you pointing to?
#59Neat, this helped me realize I haven't switched away from my provider's default DNS when I moved in, which is something I usually do. How to choose a DNS server? I usually just go with 8.8.8.8/8.8.4.4, I used to always test this with Namebench ( https://en.wikipedia.org/wiki/Namebench ) and these always turned out as the fastest - but it looks like it hasn't been updated since 2010 - are there any better tools for th…
> I think privacy should be on a different layer.
Can you elaborate which layer?
Re: Show HN: Which DNS servers are you pointing to?
#60Earlier quoted context omitted.
Meaning, if you don't want people to know you are searching for snm.donkeyporn.com than going out to the nameserver that donkeyporn is using is not exactly keeping the information private.
In practice with 1.1.1.1 you're trading the parties who know about your access from: Donkeyporn's DNS provider, com's DNS provider (0.1% chance it's not already cached), your ISP, transit providers, donkeyporn's ISP, donkeyporn service To: cloudflare, your ISP, transit providers, donkeyporn's ISP, donkeyporn service It's not a huge change and it's really about whether you trust CloudFlare more than the service donkey…
I though correctly switching to cloudflare should just be me -> cloudflare via an encrypted channel?