Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DNS0: The European public DNS that makes your internet safer

dns0.eu

Post reply on HN
Print view View original

131–140 of 187 posts

Re: DNS0: The European public DNS that makes your internet safer

#131

Post by KingOfCoders »

Symbiote wrote: post #121
helb wrote: post #113

If anyone's wondering which are the "High-risk TLDs" blocked in the "zero" filter: CF, CG, GA, GQ, ML, TK, TOP, WIN (right now, i guess it may change any time) The "kids" filter blocks the same TLDs, so it allows XXX or PORN, i guess they just block individual 2nd level domains. I just looped through IANA's TLD list with a simple script to get this. The resolver returns NXDOMAIN with "negative-caching.dns0.eu." SOA f…

It seems pretty ridiculous to block those domains outright. There are plenty of legitimate government, tourist and local sites, which could at least be whitelisted. They've blocked UNICEF's link shortener: https://uni.cf

"They've blocked UNICEF's link shortener: https://uni.cf"

Which I consider a good thing, why route links through the influence space of a country that is in a civil war with foreign mercenaries running parts of the show?

Re: DNS0: The European public DNS that makes your internet safer

#132

Post by Aeolun »

denton-scratch wrote: post #115

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

I’m now 35 and incapable of making adult decisions. Does that count?

Re: DNS0: The European public DNS that makes your internet safer

#133

Post by daneel_w »

dorfsmay wrote: post #90
daneel_w wrote: post #36

My router runs Unbound in order to rotate queries across a number of different DNS-over-TLS providers. I'll toss these guys into the mix as well out of curiosity just to see how it goes.

Given the restrictions on this server which won't be on the other, adding it to a rotating list will make DNS answers inconsistant. Why would you want to do that?

I won't be using the "zero" resolver.

Re: DNS0: The European public DNS that makes your internet safer

#134

Post by daneel_w »

ignoramous wrote: post #86
daneel_w wrote: post #36

My router runs Unbound in order to rotate queries across a number of different DNS-over-TLS providers. I'll toss these guys into the mix as well out of curiosity just to see how it goes.

Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history. As someone who runs a public DNS resolver, I can tell you that it isn't that hard to build user profiles. If you're running Unbound, might as well recurse DNS queries, instead of upstreaming it. If you are adamant on spreading DNS queries across…

>"Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history."

What I'm wary about is indeed query logging and profiling, but whether it's one provider or a dozen providers isn't that relevant to me. I make a small effort in trying to gauge which providers are honest and which ones are not.

>"As someone who runs a public DNS resolver, I can tell you that it isn't that hard to build user profiles."

Yes, I understand this. May I ask why you/RethinkDNS are doing this with your users' query data?

Re: DNS0: The European public DNS that makes your internet safer

#137

Post by nix23 »

5e92cb50239222b wrote: post #91
richij wrote: post #68

Earlier quoted context omitted.

90 ms. So much.

Keep your sarcasm to yourself. Multiply 90ms by sometimes dozens of domains modern websites like to load from. Occasionally ISP reroutes me to another Cloudflare colocation and ping to 1.1.1.1 rises to 20-25 ms. It's easily noticeable. I like to play the guessing game, and almost always "win".

Can you please tell them that? I feel you, 100ms ARE recognizable if you have otherwise a fast net, it like snap to clap.

Re: DNS0: The European public DNS that makes your internet safer

#138

Post by jMyles »

KingOfCoders wrote: post #126
denton-scratch wrote: post #115

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

If it's not for you it's not for you. I always wonder about people who go to a French restaurant and want Pizza.

> I always wonder about people who go to a French restaurant and want Pizza.

To be fair, this is more like trying to lookup contact information for the local pizzeria, and realizing to your surprise that the phone book you've picked up has directed you to the French restaurant instead.

Re: DNS0: The European public DNS that makes your internet safer

#140

Post by daneel_w »

denton-scratch wrote: post #115

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

They offer three families of resolvers: the default one which as far as I understand isn't curated at all, the "zero" one which is curated against "bad actors", and the "kids" one which you speak of.
Post reply on HN