News for hackers. Stuff that matters.
Re:"Anna's Archive" Shadow Library Blocked Following Publish... by denton-scratch on Thursday January 04, 2024 @10:37AM (#38868241)
I am running a recursive resolver locally. When it resolves a name, "upstream" means the root servers, not some DNS cache such as my ISP offers. A recursive resolver chases the name down the DNS tree to the authoritative server.

To block that, you have to either tamper with the root servers, or get control of the authoritative servers.

Re:"Anna's Archive" Shadow Library Blocked Following Publish... by gkbrk on Thursday January 04, 2024 @10:55AM (#38868487)
> To block that, you have to either tamper with the root servers, or get control of the authoritative servers.

I don't think so. The ISP can just reply to the DNS packets itself, without sending them to the root servers. Your local recursive resolver will think the response is from other DNS servers but in fact they would all be from your ISP.