[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] PSA regarding Quad9 DNS Resolver




Toralf Förster:
> On 05/11/2018 01:41 PM, Nathaniel Suchy (Lunorian) wrote:
>> Like OpenDNS, Quad9 is a censoring DNS resolver
> Is this true for 9.9.9.10 too ?


https://quad9.net/faq/
> Is there a service that Quad9 offers that does not have the blocklist
> or other security?
> 
> The primary IP address for Quad9 is 9.9.9.9, which includes the
> blocklist, DNSSEC validation, and other security features. However,
> there are alternate IP addresses that the service operates which do
> not have these security features. These might be useful for testing
> validation, or to determine if there are false positives in the Quad9
> system.
> 
> Secure IP: 9.9.9.9 Provides: Security blocklist, DNSSEC, No EDNS
> Client-Subnet sent. If your DNS software requires a Secondary IP
> address, please use the secure secondary address of 149.112.112.112
> 
> Unsecured IP: 9.9.9.10 Provides: No security blocklist, DNSSEC, sends
> EDNS Client-Subnet. If your DNS software requires a Secondary IP
> address, please use the unsecured secondary address of
> 149.112.112.10
> 
> Note: Use only one of these sets of addresses  secure or unsecured.
> Mixing secure and unsecured IP addresses in your configuration may
> lead to your system being exposed without the security enhancements,
> or your private data may not be fully protected

 

-- 
https://mastodon.social/@nusenu
twitter: @nusenu_

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays