121–130 of 364 posts
Earlier quoted context omitted.
NXDOMAIN hijacking is enough for me to switch, and most ISPs are doing it nowadays.
That’s quite a bold claim. Got any data to back it up? Source: I've yet to see this on any ISP I've used anywhere , sans free airport wifis. Travelled pretty much every continent on earth.
Earlier quoted context omitted.
NXDOMAIN hijacking is enough for me to switch, and most ISPs are doing it nowadays.
That’s quite a bold claim. Got any data to back it up? Source: I've yet to see this on any ISP I've used anywhere , sans free airport wifis. Travelled pretty much every continent on earth.
Why is Montreal reporting abnormally high response times across the board? For example: # Cloudflare Toronto 3.42ms vs. Montreal 17ms; # Google Toronto 9.42ms vs. Montreal 16.71ms.
Does anyone actually believe that google isn’t hoovering up personal data with its DNS service?
Earlier quoted context omitted.
But your DNS will have to query other DNS providers so if you’re the only one using it, it won’t be private.
You can query DNS root server. https://www.iana.org/domains/root/servers And use long TTL time with large cache size. Other than some small edge cases, this is pretty much the most secure and fastest DNS performance you will have, in most instances getting about 1 or I have been using unbound for at least 4 years. Simple and fast.
Is there a different DNS server you would recommend? I don't think my usage requires anything special.
Earlier quoted context omitted.
Yes, but how do you test different DNS providers? ;) (Please read the thread for context)
You'd have to change your nameserver manually unfortunately. But you could build a good webpage that actually measures how well your current nameserver performs over a wide variety of different types of lookups, both warm and cold caches etc.
Which negates the purpose intended in this thread.
I get it you could sorta hack together a one-off test, but please refer to the context of this thread as mentioned previously.
Which ISPs are so bad that you want to use external services, which are further in distance than your ISP, for speed? When I test with my ISP, they beat all of these services (both IPv4 and IPv6). They're simply closer to me in terms of hops. My router is another story though. The Fritzbox (>200eur router) adds 6ms of latency, and that's what is advertised over DHCP. (Might still be fine, since cached queries are fas…
Accusing government officials of mismanagement or outright theft of public funds is an easy way to get your domain black holed over here. That, piracy, and porn. Though I wouldn't be surprised if the latter two were thrown in solely to make the program look more legit.
https://cilisos.my/8-sites-the-malaysian-gomen-blocked-in-20...
Perhaps most ridiculously, Medium.com is blocked for simply hosting an article posted by a censored website. Yes, you read that right; they banned an entire domain, the vast majority of which covers nothing even remotely related to Malaysia, over a single article.
I try to be grateful they are as inept at censorship as they are oversensitive to criticism.
I feel like people forgot about how CloudFlare, Google, et. al. can new effectively censor content they don't agree with: https://fightthefuture.org/article/the-new-era-of-corporate-... ..and even though CloudFlare back pedaled on that particular decision somewhat, it still happened. If you really want something fast and secure, run your own caching DNS that uses root DNS servers.
Client -(HTTPS)> CloudFlare -(HTTP)> Server.
I also know about some people that run websites that can't get Stripe because they can't figure out how to configure SSL for their website, they just plug in CloudFlare in front, and now they can communicate with Stripe, and everything is received in cleartext following the diagram i posted.
Cloudflare calls this "Flexible SSL", and it is described here: https://support.cloudflare.com/hc/en-us/articles/200170416-W...
I have flagged this for both Cloudflare and Stripe, but none seems to care.