4 ms·
Seems almost like a Man In The Middle attack. If I send my DNS request to 8.8.8.8, I kinda expect it to go 8.8.8.8 and not get replaced by something of the ISP'
by CalChris 10y ago
Seems almost like a Man In The Middle attack. If I send my DNS request to 8.8.8.8, I kinda expect it to go 8.8.8.8 and not get replaced by something of the ISP's choice.
Isn't this one of the points of Net Neutrality? My ISP (Comcast) doesn't do this currently. I suppose I'll have to check again on January 21.
- minxomat 10y agoThis isn't an issue on net neutral ISPs like Init7, but it is here in Germany. Even on a business Fibre line.
- kuschku 10y agoThere's also jet neutral ISPs in Germany. But they're usually local only. TNG/ennit, for example.
- minxomat 10y agoI'm currently switching to a MLVPN bonded connection using a dedicated HLKomm and T-Online Fibre connection. Egress is also Germany, but a neutral backbone in a data centre. I just noticed that TO still uses their old DNS caches.
- rsync 10y ago"There's also jet neutral ISPs in Germany. But they're usually local only. TNG/ennit, for example." Actually, init7 itself is in Germany, right ? I know they have POPs there, as in France and .nl, etc.
- Willox 10y agoMy ISP in the UK actually modifies the result of any lookup of google.com/google.co.uk regardless of if I am using their DNS or not. I don't think this specific example is malicious (it's part of Google's Edge Network I guess? I wouldn't know), but it does show that they're already capable of modifying the DNS lookups ran by their customers.
- moreati 10y agoMay I ask which ISP this is?
- fred256 10y agoGoogle itself will return an edge node for google.com (or google.$TLD) if you're on an ISP with an edge node.
- rahrahrah 10y agoWhat ISP is this?
- djhworld 10y agowhat ISP are you with? I'm with BT and they don't appear to do this.
- nl 10y agoAre you sure that's what happening? I suspect you maybe seeing resolution to Google's edge network. This isn't modification - it is how DNS is designed to work.
- Willox 10y agoWhat feature of DNS allows this? I'm probably wrong if that's the case. Perhaps I'll check some other domains too.
- giovannibajo1 10y agohttps://tools.ietf.org/html/rfc7871 https://tools.ietf.org/html/rfc7871
- nl 10y agoThat's an extension to let you use Google's DNS servers and still have CDNs work. Without it the functionality described above will just work - it's only when you are using an unusual DNS setup that the extension is needed.