News for hackers. Stuff that matters.

A comment on “1.1.1.1 is now handling more than 1.3T requests per day”. Parent comment

Re:“1.1.1.1 is now handling more than 1.3T requests per day” by kokojie on Thursday August 03, 2023 @11:14AM (#36987038)
One of the more evil things they could do is show you ads, for example every 100 requests, you are shown a full page ad for a few seconds, then directs to where you were going. Pretty much like how youtube does it.

I'm not saying they will do this, but they could if they wanted to. I've seen this from DNS providers in other countries.

[ Parent | on HN ]
Re:“1.1.1.1 is now handling more than 1.3T requests per day” by lxgr on Thursday August 03, 2023 @11:38AM (#36987353)
Given that almost every site now uses HTTPS, they could only do this for users navigating to non-existing domains (and furthermore have to register the domain names themselves, or they wouldn't be able to get any TLS certificate for them).
[ Parent | on HN ]
Re:“1.1.1.1 is now handling more than 1.3T requests per day” by Ajedi32 on Thursday August 03, 2023 @11:22AM (#36987152)
Thankfully that's probably not feasible anymore given how prevalent HTTPS is these days.
[ Parent | on HN ]
Re:“1.1.1.1 is now handling more than 1.3T requests per day” by bbkane on Thursday August 03, 2023 @11:25AM (#36987195)
Would that work over HTTPS? My understanding is that, when the browser connects to the IP returned over DNS, it validates the TLS cert returned by the server at that IP contains the website name.
[ Parent | on HN ]
Re:“1.1.1.1 is now handling more than 1.3T requests per day” by aednichols on Thursday August 03, 2023 @11:50AM (#36987524)
OpenDNS used to hijack DNS to show ads, which is one of the reasons Google launched the non-hijacking 8.8.8.8 in 2009. OpenDNS quickly followed suit. No one would attempt it today, seeing as it would instantly make you the worst DNS resolver on the Internet and switching away is trivial.
[ Parent | on HN ]