Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DNS0: The European public DNS that makes your internet safer

dns0.eu

Post reply on HN
Print view View original

171–180 of 187 posts

Re: DNS0: The European public DNS that makes your internet safer

#171

Post by denton-scratch »

KingOfCoders wrote: post #159
denton-scratch wrote: post #148

Earlier quoted context omitted.

> They offer three families of resolvers Yeah, I see. On first reading, that wasn't obvious to me. But a DNS provider that can filter, and that also purports to be something to do with the EU, presumably imposes EU-mandated filtering, whichever server you choose. Or it will, as soon as it's ordered to. I don't get why people use 3rd-party resolvers. It's not hard to set up an Unbound recursor.

"presumably imposes EU-mandated filtering" Source?

It's in France. It operates under French and EU jurisdiction.

[Edit] So EU mandates will be enforced. Is that fact what you want a source for?

Re: DNS0: The European public DNS that makes your internet safer

#172

Post by ignoramous »

addingnumbers wrote: post #130
ignoramous wrote: post #86

Earlier quoted context omitted.

Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history. As someone who runs a public DNS resolver, I can tell you that it isn't that hard to build user profiles. If you're running Unbound, might as well recurse DNS queries, instead of upstreaming it. If you are adamant on spreading DNS queries across…

Won't recursing also spread your queries across multiple providers? And in the clear for deep packet inspectors to see, instead of encrypted?

You wish all nameservers would support DoH / DoT, but until then using Qname minimisation limits exposure.

Re: DNS0: The European public DNS that makes your internet safer

#173

Post by daneel_w »

ignoramous wrote: post #157
daneel_w wrote: post #134

Earlier quoted context omitted.

>"Better to send your queries to a single DNS provider (over TLS/HTTPS) rather than spread it out, because now, not one but multiple providers can build your browsing history." What I'm wary about is indeed query logging and profiling, but whether it's one provider or a dozen providers isn't that relevant to me. I make a small effort in trying to gauge which providers are honest and which ones are not. >"As someone w…

We aren't.

You will forgive me for thinking "mmmmmmm-hmmmmmm" when you say that after your initial comment on how easy it is in light of running a public resolver yourself.

Re: DNS0: The European public DNS that makes your internet safer

#174

Post by ulti552 »

helb wrote: post #107
shasts wrote: post #97

If I choose their DNS, the website shows a text at the bottom that says "You are using dns0.eu" How does the website know I'm using their DNS? I couldn't find anything in the HTTP header that would help them with this. https://imgur.com/fMZwxYz

JS does a GET request every 2 seconds or so to some random subdomain (probably to avoid caching): https://i.vgy.me/qCTabA.png The JSON response contains 'status: "unconfigured"' when you're not using their resolver and 'status: "ok"' when you are: https://i.vgy.me/iVgIe1.png That green bar just appears after a "ok" response (no page reload needed).

stupid q here but what font is your terminal using from your screenshot pic

Re: DNS0: The European public DNS that makes your internet safer

#175

Post by MrDresden »

przemub wrote: post #167
denton-scratch wrote: post #148

Earlier quoted context omitted.

> They offer three families of resolvers Yeah, I see. On first reading, that wasn't obvious to me. But a DNS provider that can filter, and that also purports to be something to do with the EU, presumably imposes EU-mandated filtering, whichever server you choose. Or it will, as soon as it's ordered to. I don't get why people use 3rd-party resolvers. It's not hard to set up an Unbound recursor.

It is within .eu domain. Nothing to do with the European Union.

.eu domains are only available to any person or entity that reside within the European Union. As such, any European Union legislation will apply.

Re: DNS0: The European public DNS that makes your internet safer

#176

Post by helb »

ulti552 wrote: post #174
helb wrote: post #107

Earlier quoted context omitted.

JS does a GET request every 2 seconds or so to some random subdomain (probably to avoid caching): https://i.vgy.me/qCTabA.png The JSON response contains 'status: "unconfigured"' when you're not using their resolver and 'status: "ok"' when you are: https://i.vgy.me/iVgIe1.png That green bar just appears after a "ok" response (no page reload needed).

stupid q here but what font is your terminal using from your screenshot pic

Iosevka: https://typeof.net/Iosevka/

Re: DNS0: The European public DNS that makes your internet safer

#177

Post by sgjohnson »

moduspol wrote: post #163
sgjohnson wrote: post #95

Earlier quoted context omitted.

The era of easy to remember DNS server addresses is coming to a close anyway, due to IPv6. Cloudflare’s are 2606:4700:4700:1001:: and 2606:4700:4700:1111:: I’ve been deploying IPv6 recently and these addresses haven’t burnt into my brains yet, so I occasionally have to do `dig AAAA one.one.one.one` still.

Coming soon: my public IPv6 dns at dead:beef::

Mine will be b00b:: once IANA assigns me b00b::/16

Re: DNS0: The European public DNS that makes your internet safer

#178

Post by ignoramous »

helb wrote: post #107
shasts wrote: post #97

If I choose their DNS, the website shows a text at the bottom that says "You are using dns0.eu" How does the website know I'm using their DNS? I couldn't find anything in the HTTP header that would help them with this. https://imgur.com/fMZwxYz

JS does a GET request every 2 seconds or so to some random subdomain (probably to avoid caching): https://i.vgy.me/qCTabA.png The JSON response contains 'status: "unconfigured"' when you're not using their resolver and 'status: "ok"' when you are: https://i.vgy.me/iVgIe1.png That green bar just appears after a "ok" response (no page reload needed).

Here's an open source nameserver that helps ID DNS resolver in use: https://github.com/redirect2me/which-dns

Re: DNS0: The European public DNS that makes your internet safer

#179

Post by ignoramous »

daneel_w wrote: post #173
ignoramous wrote: post #157

Earlier quoted context omitted.

We aren't.

You will forgive me for thinking "mmmmmmm-hmmmmmm" when you say that after your initial comment on how easy it is in light of running a public resolver yourself.

Ideally, one should think that for every dns resolver they use.

As one example, even when a popular configurable dns resolver says they don't store logs outside the EU, they might yet be caching those logs and analytics with AWS and GCP servers all over the world.

Btw, Rethink is FOSS (https://github.com/serverless-dns/serverless-dns), and its deployment logs are inspectable right on GitHub. Not saying you should trust us, but that's already more transparency than most resolvers (speak nothing of vague / cute privacy policy). Any how, our focus with Rethink has mainly been anti censorship / anti surveillance, and nothing much else.

Re: DNS0: The European public DNS that makes your internet safer

#180

Post by questiond »

denton-scratch wrote: post #171
KingOfCoders wrote: post #159

Earlier quoted context omitted.

"presumably imposes EU-mandated filtering" Source?

It's in France. It operates under French and EU jurisdiction. [Edit] So EU mandates will be enforced. Is that fact what you want a source for?

france is like the hub of content anarchism dude. culture matters, its not all about laws.
Post reply on HN