News for hackers. Stuff that matters.
Re:Archive.is owner on “continuity of his project” by oh_sigh on Wednesday September 08, 2021 @01:00PM (#28459884)
For reference: the spat is that Cloudflare DNS does not leak geographic information of the queryer through EDNS, and the archive.is fellow is requiring geographic information to provide valid DNS lookups. So he intentionally sends back bad results when it is 1.1.1.1 querying his nameservers.

I love the site, but his stance on this doesn't really make sense to me, and it's a shame that millions and millions of people use 1.1.1.1 daily and archive.is is the one website that doesn't work for those people.

Re:Archive.is owner on “continuity of his project” by silisili on Wednesday September 08, 2021 @02:16PM (#28461037)
I'm not sure the term 'leak' applies. It's an anti-cdn play. Refusing to use EDNS correctly makes the web slower for a lot of people. And it adds little to nothing to privacy since the answer IP is going to know your IP at the next step anyways...

As for why archive.is cares so much...that I don't know. Perhaps they rely on such data to give a fast experience, and are tired of this charade...but that's just speculation.

Re:Archive.is owner on “continuity of his project” by magila on Wednesday September 08, 2021 @02:45PM (#28461402)
Cloudflare's edge network is sufficiently dense that ECS data is unnecessary in almost all cases. The requesting data center will be close enough to the client that doing geoip on the source IP will have the same results as using ECS.

There's nothing incorrect about what Cloudflare is doing, EDNS does not require ECS data to be included in requests, but for whatever reason the maintainer of Archive.is decided to block 1.1.1.1 over it.

Re:Archive.is owner on “continuity of his project” by nextaccountic on Wednesday September 08, 2021 @04:47PM (#28462848)
But not sending ECS data harms non-cloudflare CDNs, right?

edit: from here https://news.ycombinator.com/item?id=19828702 I gather that this indeed harms CDNs outside the ones that Cloudflare has a business relationship with.

> EDNS IP subsets can be used to better geolocate responses for services that use DNS-based load balancing. However, 1.1.1.1 is delivered across Cloudflare’s entire network that today spans 180 cities. We publish the geolocation information of the IPs that we query from. That allows any network with less density than we have to properly return DNS-targeted results. For a relatively small operator like archive.is, there would be no loss in geo load balancing fidelity relying on the location of the Cloudflare PoP in lieu of EDNS IP subnets.

> We are working with the small number of networks with a higher network/ISP density than Cloudflare (e.g., Netflix, Facebook, Google/YouTube) to come up with an EDNS IP Subnet alternative that gets them the information they need for geolocation targeting without risking user privacy and security. Those conversations have been productive and are ongoing. If archive.is has suggestions along these lines, we’d be happy to consider them.

Re:Archive.is owner on “continuity of his project” by hansel_der on Wednesday September 08, 2021 @01:21PM (#28460218)
> I love the site, but his stance on this doesn't really make sense to me

would not be surprised if he has some personal axe to grind with cf (they are no sheep either).

also i would be wary of overestimating market penetration of any 3rd-party dns provider; iirc google has total dominance of this segment and is still below 10%.

Re:Archive.is owner on “continuity of his project” by spzx on Wednesday September 08, 2021 @02:05PM (#28460879)
HN discussion from 2019 on this topic: https://news.ycombinator.com/item?id=19828317
Re:Archive.is owner on “continuity of his project” by slim on Wednesday September 08, 2021 @01:45PM (#28460567)
Millions use 1.1.1.1 ? Any source for that ?
Re:Archive.is owner on “continuity of his project” by sp332 on Wednesday September 08, 2021 @02:01PM (#28460809)
The Android app has 418,000 reviews and over 50 million installs, and the iPhone app has 230,000 reviews. The number of people who use it without an app is probably a lot higher.