News for hackers. Stuff that matters.
Re:Tell HN: Amazon now owns 3.0.0.0/8 by ocdtrekkie on Thursday November 08, 2018 @11:36AM (#18407477)
Then what I need is a DNS client on my PC which can use all these major DNS services, but at random to provide incomplete DNS info to any given one, so it'll maybe query any random two, confirm they respond the same to verify nobody's playing unfair.
Re:Tell HN: Amazon now owns 3.0.0.0/8 by cosmie on Thursday November 08, 2018 @11:52AM (#18407647)
DNSCrypt-Proxy[1] already supports the randomized DNS resolver need[2]. It also supports DNS-over-HTTPS, providing assurance that even your ISP won't be able to snoop on all of your DNS queries.

While it doesn't support live comparison of DNS results, it can log out entries per DNS resolver and you can post-process those logs to validate their responses against each other, considering your queries will over time hit different resolvers. Not perfect since there are legitimate reasons to return different responses over time, but it's something.

[1] https://github.com/jedisct1/dnscrypt-proxy [2] https://github.com/jedisct1/dnscrypt-proxy/wiki/Load-Balanci...

Re:Tell HN: Amazon now owns 3.0.0.0/8 by ericpauley on Thursday November 08, 2018 @07:30PM (#18411406)
DNS servers often return different results to different clients for load balancing, so checking multiple resolvers would lead to many conflicts.
Re:Tell HN: Amazon now owns 3.0.0.0/8 by insomniacity on Thursday November 08, 2018 @11:49AM (#18407618)
On Linux (and OSX?) you could run a local resolver configured to do round-robin? Comparing answers would probably be new functionality though.
Re:Tell HN: Amazon now owns 3.0.0.0/8 by 540297 on Thursday November 08, 2018 @11:49AM (#18407620)
> Then what I need is a DNS client on my PC which can use all these major DNS services, but at random to provide incomplete DNS info to any given one, so it'll maybe query any random two, confirm they respond the same to verify nobody's playing unfair.

What kind of tricks are you afraid of these DNS services could get up to?

Re:Tell HN: Amazon now owns 3.0.0.0/8 by ocdtrekkie on Thursday November 08, 2018 @11:57AM (#18407682)
Well, DNS is both a significant way one could profile what types of information a given connection is used for and could be used to profile you, so I want to give a DNS provider incomplete information where possible. And as DNS is also a common way to redirect or censor traffic, I feel like there'd be value in a system that would double check that everyone's sending me to the same place. If I get inconsistent results, I could dump both and query two other ones in the pool.
Re:Tell HN: Amazon now owns 3.0.0.0/8 by voltagex_ on Thursday November 08, 2018 @07:02PM (#18411206)
The problem I have there is that Akamai and other CDNs seem to return different results if I'm using my ISP's resolvers vs any others. Getting good local nodes is important in a bandwidth constrained (and far away) environment like Australia.