Live data from Hacker News

DNS0: The European public DNS that makes your internet safer

dns0.eu

151–160 of 187 posts

Re: DNS0: The European public DNS that makes your internet safer

#151

Earlier quoted context omitted.

They offer three families of resolvers: the default one which as far as I understand isn't curated at all, the "zero" one which is curated against "bad actors", and the "kids" one which you speak of.

> They offer three families of resolvers Yeah, I see. On first reading, that wasn't obvious to me. But a DNS provider that can filter, and that also purports to be something to do with the EU, presumably imposes EU-mandated filtering, whichever server you choose. Or it will, as soon as it's ordered to. I don't get why people use 3rd-party resolvers. It's not hard to set up an Unbound recursor.

[deleted]

Re: DNS0: The European public DNS that makes your internet safer

#152

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

If it's not for you it's not for you. I always wonder about people who go to a French restaurant and want Pizza.

When I first encountered pizza, I was a kid, and it was in France. For quite a few years, I thought pizza was a French thing.

I'm not sure what your point is. I read the article because I'm interested in DNS; not because I'm researching 3rd-party resolvers. I run my own Unbound recursor.

Re: DNS0: The European public DNS that makes your internet safer

#153
post #132

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

I’m now 35 and incapable of making adult decisions. Does that count?

I think there may be a 5-year window, perhaps from 60-65, when you are old enough but not too old. Older, and you're child-like because you're senile; younger, and you're naive, reckless, and under-informed.

Re: DNS0: The European public DNS that makes your internet safer

#154
post #147

While I don't think it should be the only choice. Recursive dns does sound like the sort of service a government should offer it's citizens. Authoritative dns also sounds like the sort of service a government should offer it's citizens. I mean, sure, it would suck compared to commercial dns, but at least everybody could have a name if they wanted.

nope. What do you do if your gov says "no" to your website? via your idea that would be a simple matter of seconds

Then you use another choice, the internet is great like that, what do you do when google's resolver says "nope" to your domain?

Personally, all my devices run through my own recursive resolver which in turn directly resolves the address. Then I get to say "nope" to whatever domains I want(mainly ad services). Except for those thrice infernal dns over https devices, hard to police them that way.

Re: DNS0: The European public DNS that makes your internet safer

#155
CIRA, Canada's Internet Registry, runs a number of public DNS servers[1]. The main attraction is that the service is provided by a non-profit and the data and control are held in Canada, subject to Canadian laws and regulation.

They also offer a number of levels of protection, from none (simply resolving the queries) to one blocking suspected malware/C2 domain and one blocking pornographic material.

[1] https://www.cira.ca/cybersecurity-services/canadian-shield

Re: DNS0: The European public DNS that makes your internet safer

#156

My router runs Unbound in order to rotate queries across a number of different DNS-over-TLS providers. I'll toss these guys into the mix as well out of curiosity just to see how it goes.

Why not just have unbound make the query itself? no need to depend on a third party recursive resolver if you already have your own.

Re: DNS0: The European public DNS that makes your internet safer

#157

Earlier quoted context omitted.

Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history. As someone who runs a public DNS resolver, I can tell you that it isn't that hard to build user profiles. If you're running Unbound, might as well recurse DNS queries, instead of upstreaming it. If you are adamant on spreading DNS queries across…

>"Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history." What I'm wary about is indeed query logging and profiling, but whether it's one provider or a dozen providers isn't that relevant to me. I make a small effort in trying to gauge which providers are honest and which ones are not. >"As someone w…

We aren't.

Re: DNS0: The European public DNS that makes your internet safer

#158

> safe for children Ah, it's filtered. Someone decides what "children" means. Someone decides what "safe" means. There are people who think that not just under-16s, but almost everyone is incapable of making adult decisions. And different (responsible, informed) adults may come to different conclusions about what is and isn't safe. Curated DNS may suit some people, but I appreciate having access to the real internet.

If it's not for you it's not for you. I always wonder about people who go to a French restaurant and want Pizza.

Probably the best pizza I’ve ever had in my life was at a French restaurant in Vientiane, Laos.

So, yeah…

Re: DNS0: The European public DNS that makes your internet safer

#159

Earlier quoted context omitted.

They offer three families of resolvers: the default one which as far as I understand isn't curated at all, the "zero" one which is curated against "bad actors", and the "kids" one which you speak of.

> They offer three families of resolvers Yeah, I see. On first reading, that wasn't obvious to me. But a DNS provider that can filter, and that also purports to be something to do with the EU, presumably imposes EU-mandated filtering, whichever server you choose. Or it will, as soon as it's ordered to. I don't get why people use 3rd-party resolvers. It's not hard to set up an Unbound recursor.

"presumably imposes EU-mandated filtering"

Source?

Re: DNS0: The European public DNS that makes your internet safer

#160

Earlier quoted context omitted.

> Their branding and wording makes it look like they are Because the website is blue and mentions "European Union"? It doesn't say anywhere that it's a official EU project, nor does it contain some of the famous "banners" that EU projects usually have in the footer to show their grants/funding, nor is it on a official EU domain. Clearly a not-EU project from first glance.

It seems like they went through enough trouble to ensure that the page is translated into the official languages of the EU which is usually only something you see on EU websites. For that reason, it does appear official'ish at first glance.

Actually my impression is that they have done a good job of targeting the EU market and its languages without suggesting that they have any official connection to the EU. There's neither a flag nor a logo and the background blue is, to my eye at least, not the azure of the EU flag.

(Although curiously they call their background colour bg-european-blue in their CSS.)

Post reply on HN