3 ms·

Unless one is for some reason unsatisfied with one's ISP DNS service, why would one use another one? I mean, after you get your response from server X, it is yo

Unless one is for some reason unsatisfied with one's ISP DNS service, why would one use another one? I mean, after you get your response from server X, it is your ISP that will deliver the webpage so privacy-wise it doesn't make any difference (not even if you're using DNSCrypt or whatever). If your concern is response time then use dnsmasq. If you're using a VPN your ISP can't see your DNS requests (nor if you're using TOR and have properly configured it). Yes this is basically a MITM and it's bad, I'm just wondering why would anyone use something other than their ISPs DNS service in the first place.

minxomat 10y ago
It matters if the local ISP DNS relay uses unreasonable cache times that you can't purge. This interfered more than one time with my development process on remote servers. I had to tunnel through another of my servers to circumvent this.
- eikenberry 10y ago
  +1 If you work on DNS at all you need control over the cache so you can purge it as needed. This is why I run my own local unbound server as well. Plus it makes it easy to add forwarders for specific domains when you use a limited routing VPN.
kevinburke 10y ago
Some ISP's also hijack NXDOMAIN requests to serve ads, see for example https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/ https://hackercodex.com/guide/how-to-stop-isp-dns-server-hij....
hannob 10y ago
Have you ever been in a country with DNS censorship? (that includes for example Belgium and Denmark)
- bogomipz 10y ago
  Can you provide evidence that Belgium and Denmark have "DNS censorship"?
  - bogomipz 10y ago
    I didn't think so.
  - asclepi 10y ago
    He may be referring to the rather elementary form of DNS filtering that both countries currently employ: * http://greatfirewallofbelgium.be/ http://greatfirewallofbelgium.be/ * https://en.wikipedia.org/wiki/Censorship_in_Denmark#Internet_censorship https://en.wikipedia.org/wiki/Censorship_in_Denmark#Internet...

minxomat 10y ago

It matters if the local ISP DNS relay uses unreasonable cache times that you can't purge. This interfered more than one time with my development process on remote servers. I had to tunnel through another of my servers to circumvent this.

eikenberry 10y ago
+1 If you work on DNS at all you need control over the cache so you can purge it as needed. This is why I run my own local unbound server as well. Plus it makes it easy to add forwarders for specific domains when you use a limited routing VPN.

kevinburke 10y ago

Some ISP's also hijack NXDOMAIN requests to serve ads, see for example https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/ https://hackercodex.com/guide/how-to-stop-isp-dns-server-hij....

hannob 10y ago

Have you ever been in a country with DNS censorship? (that includes for example Belgium and Denmark)

bogomipz 10y ago
Can you provide evidence that Belgium and Denmark have "DNS censorship"?
- bogomipz 10y ago
  I didn't think so.
- asclepi 10y ago
  He may be referring to the rather elementary form of DNS filtering that both countries currently employ: * http://greatfirewallofbelgium.be/ http://greatfirewallofbelgium.be/ * https://en.wikipedia.org/wiki/Censorship_in_Denmark#Internet_censorship https://en.wikipedia.org/wiki/Censorship_in_Denmark#Internet...