In response to several court orders, Cloudflare geoblocked more than 400 sports streaming piracy domain names on its pass-through service in France last year. Notably. Cloudflare says that, despite requests, it has not blocked any websites through the 1.1.1.1 Public DNS Resolver. That last comment is relevant to the renewed site blocking push in the United States.

top 10 comments

sorted by: hot top controversial new old

[–] sevenOfKnives@lemmy.blahaj.zone 23 points 1 day ago (2 children)

as always dns is the weak link in internet infrastructure. if they can takedown piracy domains they can take down anything.

[–] Appoxo@lemmy.dbzer0.com 13 points 1 day ago (1 children)

Time for old school IP indexes.

[–] melroy@kbin.melroy.org 6 points 1 day ago

Yup back to tracking a HOST file. Maybe I should write a tool that is decentralized writing a host file across the internet and you can use it whenever you want. This will also allow you to get domains that is currently not possible ^^

[–] merde@sh.itjust.works 9 points 1 day ago (2 children)

luckily, it's easy to change your dns server.

[–] melroy@kbin.melroy.org 3 points 1 day ago (1 children)

it's easy to change your dns server. yet*

Until they block that as well by controlling the root DNS servers.

[–] Draconic_NEO@lemmy.dbzer0.com 2 points 1 day ago (1 children)

Maybe recursive DNS will become much more popular. I'd love to see faith and compliance with ICANN and IANA erode at least a little bit. Centralized DNS is the Achilles heel of the open internet, and yes that extends to activitypub based platforms which federate via domains.

[–] melroy@kbin.melroy.org 4 points 1 day ago (1 children)

I'm indeed running my own recursive DNS server called Unbound. Everybody should run one at home.

[–] CosmicTurtle0@lemmy.dbzer0.com 2 points 11 hours ago (1 children)

Are you pulling directly from root servers? I run pihole but it's upstream is Cloudflare.

[–] melroy@kbin.melroy.org 1 points 5 hours ago

Yes, Unbound by default will query DNS root servers (root hints) without any middle man, thus greatly improve security. Unless you override forward-zone: or one or all stub-zone.

But only if it needs to, since Unbound has also a cache to store the DNS queries results.

See my config: https://gitlab.melroy.org/-/snippets/620

[–] far_university190@feddit.org 2 points 1 day ago

And little less easy to run own.