News for hackers. Stuff that matters.

A comment on Ask HN: Neutral DNS servers?. Parent comment

Re:Ask HN: Neutral DNS servers? by progval on Friday March 11, 2022 @05:18PM (#30646725)
> nothing about DNSSEC prevents a DNS server (or middlebox) from denying results to a disfavored domain

But at least it is detectable thanks to NSEC and NSEC3 records.

[ Parent | on HN ]
Re:Ask HN: Neutral DNS servers? by cyounkins on Friday March 11, 2022 @05:48PM (#30647052)
Kind of. An intermediary can drop packets and the client will never get the response.
[ Parent | on HN ]
Re:Ask HN: Neutral DNS servers? by tptacek on Friday March 11, 2022 @08:55PM (#30648270)
It's detectable when the site that the DNS provider is censoring falls off the Internet!
[ Parent | on HN ]