Malaysia backtracks on DNS redirection decision
1–10 of 49 posts
Re: Malaysia backtracks on DNS redirection decision
#2A rare move showing grace on behalf of the government, but the fact that the decision was made first, followed subsequently by a backtrack is still alarming.
Re: Malaysia backtracks on DNS redirection decision
#3While they've backtracked, every dictator in the world probably took notice and its only a matter of time.
Re: Malaysia backtracks on DNS redirection decision
#4Can DNS-over-HTTPS help to avoid this?
Re: Malaysia backtracks on DNS redirection decision
#5While they've backtracked, every dictator in the world probably took notice and its only a matter of time.
Greece is already way ahead!
When one tries to visit some sites like LibGen, DNS is redirected to a "no-no you shouldn't go there" page, which in turn redirects to this official finger-wagging page: https://opi.gr/edppi_block/edppi_block.html
DNS hijacking was also used during the beginning of the Ukraine affair as part of an EU-wide censorship push, blocking sites like the Kremlin and Pravda, though without further redirection.
Re: Malaysia backtracks on DNS redirection decision
#6A rare move showing grace on behalf of the government, but the fact that the decision was made first, followed subsequently by a backtrack is still alarming.
It costs very little to try and see if it works out, they will try again shortly. You can see the same bahavior with chat regulatons in the EU.
Re: Malaysia backtracks on DNS redirection decision
#7Can DNS-over-HTTPS help to avoid this?
[deleted]
Re: Malaysia backtracks on DNS redirection decision
#8LOL
Re: Malaysia backtracks on DNS redirection decision
#9Can DNS-over-HTTPS help to avoid this?
Yes, assuming you have a non compromised browser or certificate trust chain
Re: Malaysia backtracks on DNS redirection decision
#10Can DNS-over-HTTPS help to avoid this?
Yes, assuming you have a non compromised browser or certificate trust chain
Tangential question: how are IP addresses in certificates validated? Cloudflare was subject to a BGP hijack of the 1.1.1/24 prefix, how does it prevent someone from running a malicious DNS server?