News for hackers. Stuff that matters.

A comment on SecureDNS will shutdown on 30th of April 2020.

Re:SecureDNS will shutdown on 30th of April 2020 by AnonC on Monday April 20, 2020 @12:41PM (#22925586)
I didn’t find any information about this service’s infrastructure and presence. There isn’t much information about its operations either. It seems like a single person project, which is something people shouldn’t rely on especially if it’s going to help you connect online (or don’t tell common people to rely on these).

With bigger providers like Google and Cloudflare providing free DNS and having presence around the world (to reduce latency), it’s not going to be easy to compete for others.

Recently I switched from Cloudflare to NextDNS. I like the fact that NextDNS has a closer presence in many locations (for lower latency) and also has several ad blocking lists you can subscribe to. It’s close to having a Pi-Hole on the cloud and close to having a non-customized uBlock Origin on the cloud. The web interface to customize this is easy to use. The only thing I don’t like is that it’s not a simple DNS configuration if you aren’t interested in additional protections or ad blocking lists. It requires an app for every supported platform. I don’t recall seeing a set of IP addresses published upfront by NextDNS, like how Google DNS and Cloudflare do. The pricing will be another factor to consider whenever it exits beta.

[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by jccooper on Monday April 20, 2020 @01:21PM (#22926031)
NextDNS does have regular DNS servers so you don't have to have an app, though you do have to register your device IP so it's not a good option for mobile use.
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by smileybarry on Monday April 20, 2020 @01:41PM (#22926280)
Well, if you have an Android device with Android 9+ you can use built-in DNS-over-TLS: https://blog.cloudflare.com/enable-private-dns-with-1-1-1-1-... It works for both Wi-Fi and LTE and it's how I use NextDNS on my Pixel.
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by m-p-3 on Tuesday April 21, 2020 @09:37AM (#22934817)
Sadly DNS-over-TLS wasn't working for me on some networks (probably filtered or the port blocked), while DNS-over-HTTPS was passing through seamlessly.

I wish Android supported both natively.

[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by milankragujevic on Monday April 20, 2020 @02:53PM (#22927055)
Wait, I've always wondered how do the custom DNS services work if your IP changes every 12/24h? And if you're begin CGNAT so you share your IP with hundreds of users?
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by tecleandor on Monday April 20, 2020 @03:23PM (#22927396)
If you have a dynamic IP and use regular DNS, NextDNS allows you to ping them on IP change (via an app or a call to their API via a simple curl)

On your cellphone, there's an App that creates a fake vpn

If you're using DNS over HTTP or TLS, you can add an identifier to your requests, so NextDNS knows who you are even when you change IP addresses or you are behind a NAT or CGNAT.

[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by milankragujevic on Monday April 20, 2020 @03:32PM (#22927496)
Ah, nice. I didn't realize DDNS-like client apps can be used to maintain DNS client profile info with a regularly updating IP address. Cool!
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by AnonC on Tuesday April 21, 2020 @04:25AM (#22933067)
Check out the NextDNS FAQ [1] and navigate to the question titled “What is Linked IP?”

[1]: https://nextdns.io/faq

[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by m-p-3 on Tuesday April 21, 2020 @09:38AM (#22934837)
I tied my hostname to my NextDNS account, so that was quite easy to manage as I already keep that one up-to-date through DNS-O-Matic on my router.
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by jccooper on Monday April 20, 2020 @03:34PM (#22927526)
You have to ping it from your machine periodically so it can pick up the new IP, either manually or automatically, or you can use existing dynamic DNS. As for really wide NAT... dunno. May just be incompatible if there's more than one user in your block.
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by ThePowerOfFuet on Monday April 20, 2020 @06:55PM (#22929755)
You can give them your dynamic CNAME and they can follow you.
[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by dbliss on Monday April 20, 2020 @01:59PM (#22926504)
Nextdns does have published DNS ips:

45.90.28.245 45.90.30.245

[ Parent | on HN ]
Re:SecureDNS will shutdown on 30th of April 2020 by AnonC on Tuesday April 21, 2020 @04:18AM (#22933042)
Thank you. I didn’t find it published prominently, like it is with Google DNS, Cloudflare DNS and Quad9 DNS. The choice of this address is a huge contrast to the others I mentioned, where those are very easy to remember.
[ Parent | on HN ]