News for hackers. Stuff that matters.

A comment on A lock with many keys: Spoofing DNSSEC-signed domains in 8.8.8.8. Parent comment

Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by ftobin on Saturday March 12, 2022 @04:57PM (#30655311)
Cloudflare's malware blocking service is my go-to. 1.1.1.2, supporting DoH and DoT. I prefer them over Quad9 because Google blog post listed several malware domains and Quad9 only caught half, while Cloudflare caught them all. https://www.reddit.com/r/Quad9/comments/t9b9v1/quad9_not_cat...
[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by benbristow on Saturday March 12, 2022 @06:54PM (#30656326)
1.1.1.1 is good but it has a bit of an annoying issue where it won't resolve archive.is/archive.today names.

It's been discussed before

https://news.ycombinator.com/item?id=19828317

I use that site quite often so it makes it a bit of a no-go.

[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by seanhunter on Sunday March 13, 2022 @07:15AM (#30660232)
I am on 1.1.1.1 and it resolves archive.is just fine. I seemingly can't view a number of pages there because of "no cipher overlap" if I turn on https-only but that is not a cloudflare dns problem.
[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by charcircuit on Saturday March 12, 2022 @11:21PM (#30657934)
Both archive.is and archive.today resolve for me with 1.1.1.1.
[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by dorianmariefr on Saturday March 12, 2022 @06:07PM (#30655904)
I think you meant 1.1.1.1 even though https://1.1.1.2/ redirects to 1.1.1.1
[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by iampims on Saturday March 12, 2022 @06:14PM (#30655957)
1.1.1.2 is correct, see this blogpost:

https://blog.cloudflare.com/introducing-1-1-1-1-for-families...

[ Parent | on HN ]
Re:A lock with many keys: Spoofing DNSSEC-signed domains in ... by kingcharles on Saturday March 12, 2022 @06:12PM (#30655941)
No, I just checked, 1.1.1.1 resolves everything.

1.1.1.2 & 1.0.0.2 are their malware-blocking servers.

[ Parent | on HN ]