131–137 of 137 posts
Earlier quoted context omitted.
>My guess is that FIOS was doing the same to you, just without your interests in mind. It wasn't FIOS doing it, the IP was in Israel and was known as a malware serving IP.
Could be your router was hacked too...
Earlier quoted context omitted.
Why would cloudflare do that? It's not in their business model and "it makes more money" is hardly a thing that motivates corporations all the time, otherwise google and facebook would be offering subscription services at 20$/year to get ad- and track-free. Why would cloudflare even want to know what websites you visit? They don't operate an adnetwork, they operate a CDN. At best they could use it to pre-cache websit…
> "it makes more money" is hardly a thing that motivates corporations all the time Really? The primary purpose of any corporation is earning as much money as possible.
If CloudFlare started selling DNS info when they have emphasized that their DNS service is caring for privacy, people apparently stop using their resolver and given the impression that they can lie, it can also hurt their main business.
Earlier quoted context omitted.
As an ISP, I'm skeptical of the motivations of big CDNs and Google in general, but it's becoming an ietf standard. I run recursive resolvers for clients numbering in the hundreds of thousands, with an ACL that allows only our ARIN IP blocks to query them. It is not hard to put a dns-over-https frontend in place for my clients which pulls queries from my own trusted bind9 servers. Any ISP with a clue can do the same.
For people who know how, why not just run this stuff locally? Setup your own recursive resolver on an openwrt router? Or maybe in a hosted VM close to where you live? I know Google and CF claim they don't track this DNS information, but why even use them when you can run your own. Keep in mind CF did have a software bug that spewed SSL traffic and passwords all over the Internet[1], and they took down a website once…
I'd like to know a way to host your own resolver but keep it private even when you're on mobile IP.
Having an opt in security mechanism is easy to deploy as in keeping the http version of a site available while running https on a new port for clients that want to use it.
There are 3 major protocols available for DNS privacy: * DNSCrypt * DNS over TLS * DNS over HTTPS DNSCrypt is the one with better client support and a long list of providers available. If you pick DNS over TLS or DNS over HTTPS you will be restricted to 3 or 4 major players (google, quad9, cloudflare and cleanbrowsing). If you trust them, you are good. For example, this is the list of providers with DNSCrypt support:…
Do the dnscrypt providers actually work , though? I tried setting it up from my machine, and it seemed like many of them were gone. I eventually managed to find a working provider in Iceland, but being that I'm in a country on the opposite side of the planet, the increased latency made the internet markedly more sluggish.
Earlier quoted context omitted.
Okay, let's do it by having an analog. You are given advice on how to safely cross a four-way intersection by two companies. One is an insurance company specialised in people being run over by semi trucks at four way intersections. The other is a contractor that designs, builds and maintains four way intersections for the government and private entities. Of course, yes, the later could collude with the former to make…
Your analogy is bad because it describes behavior which is illegal. If you want to make as much money as possible, you might avoid decisions like the one you present which will cost you more money when it is exposed.
Earlier quoted context omitted.
Do the dnscrypt providers actually work , though? I tried setting it up from my machine, and it seemed like many of them were gone. I eventually managed to find a working provider in Iceland, but being that I'm in a country on the opposite side of the planet, the increased latency made the internet markedly more sluggish.
Unless you are still running version 1, dnscrypt-proxy will automatically pick the fastest, working servers for you.