News for hackers. Stuff that matters.

A comment on 1.1.1.1: Fast, privacy-first consumer DNS service. Parent comment

Re:1.1.1.1: Fast, privacy-first consumer DNS service by sashametro on Monday April 02, 2018 @08:33AM (#16733944)
If you run those commands without the +short you will see that the TTL values for those responses are less than 59 (which for Google Public DNS, indicates they are cached, and explaining why the IP addresses shown are not yours).

The o-o.myaddr.l.google.com domain is a feature of Google's authoritative name servers (ns[14].google.com) and not of 8.8.8.8. You can send similar queries through 1.1.1.1 (where you will see that there is no EDNS Client Subnet data provided, improving the privacy of your DNS but potentially returning less accurate answers, as Google's authoritative servers do not have your IP subnet, but only the IP address of the CloudFlare resolver forwarding your query.

[ Parent | on HN ]
Re:1.1.1.1: Fast, privacy-first consumer DNS service by DesertBattery on Monday April 02, 2018 @08:58AM (#16734096)
Aren't o-o.myaddr.l.google.com is intended for troubleshooting and should show correct ECS? o-o.myaddr.test.l.google.com always show correct ECS.
[ Parent | on HN ]