Live data from Hacker News

DNS0: The European public DNS that makes your internet safer

dns0.eu

121–130 of 187 posts

Re: DNS0: The European public DNS that makes your internet safer

#121
post #113

If anyone's wondering which are the "High-risk TLDs" blocked in the "zero" filter: CF, CG, GA, GQ, ML, TK, TOP, WIN (right now, i guess it may change any time) The "kids" filter blocks the same TLDs, so it allows XXX or PORN, i guess they just block individual 2nd level domains. I just looped through IANA's TLD list with a simple script to get this. The resolver returns NXDOMAIN with "negative-caching.dns0.eu." SOA f…

It seems pretty ridiculous to block those domains outright. There are plenty of legitimate government, tourist and local sites, which could at least be whitelisted.

They've blocked UNICEF's link shortener: https://uni.cf

Re: DNS0: The European public DNS that makes your internet safer

#124

Today it's a feature. Tomorrow it becomes mandatory by law. Loosing freedom with a big bang and a hole lot of happy people because they cannot compute. There is nothing good about things like that, at least on the long run.

This is run by a French non-profit, not the EU government. What are you on about?

Re: DNS0: The European public DNS that makes your internet safer

#125
Since they don't seem to be mentioned on their website, DNS Stamps are sdns://AgMAAAAAAAAAACCaOjT3J965vKUQA9nOnDn48n3ZxSQpAcK6saROY1oCGQdkbnMwLmV1Ci9kbnMtcXVlcnk ("zero" version) and sdns://AgMAAAAAAAAAACCaOjT3J965vKUQA9nOnDn48n3ZxSQpAcK6saROY1oCGQxraWRzLmRuczAuZXUKL2Rucy1xdWVyeQ ("kids" version).

But these are already present in the list of public encrypted resolvers (https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v...).

Re: DNS0: The European public DNS that makes your internet safer

#126

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

If it's not for you it's not for you.

I always wonder about people who go to a French restaurant and want Pizza.

Re: DNS0: The European public DNS that makes your internet safer

#127

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

Nonsense.

You can choose which version to use, same with Cloudflare’s 3 different DNS choices.

Re: DNS0: The European public DNS that makes your internet safer

#128

Earlier quoted context omitted.

Well you'd think the EU would have more resources than a single company.

This is not something from the EU as the organization, but from a French non-profit.

So in short, they're completely noncredible. I'm not sure who in the right mind would trust a random small company with their DNS.

Re: DNS0: The European public DNS that makes your internet safer

#129
post #84

Earlier quoted context omitted.

Not affiliated with EU at all. Their branding and wording makes it look like they are until you scroll to the bottom and read the About. Admittedly I don't live in the EU so to some of you folks the non-affiliation may seem obvious.

> Admittedly I don't live in the EU so to some of you folks the non-affiliation may seem obvious. The webpage is too nice looking and lacking the 30 poorly resized 80x80 EU institution logos. So yeah, not affiliated ;P

On the other hand, it doesn’t handle internationalization very well; something I find the EUI websites do properly.

Re: DNS0: The European public DNS that makes your internet safer

#130

My router runs Unbound in order to rotate queries across a number of different DNS-over-TLS providers. I'll toss these guys into the mix as well out of curiosity just to see how it goes.

Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history. As someone who runs a public DNS resolver, I can tell you that it isn't that hard to build user profiles. If you're running Unbound, might as well recurse DNS queries, instead of upstreaming it. If you are adamant on spreading DNS queries across…

Won't recursing also spread your queries across multiple providers? And in the clear for deep packet inspectors to see, instead of encrypted?
Post reply on HN