4 ms·

I presume that Google uses this as part of it's surveillance operation.

by MikeGale 9y ago

gaius 9y ago
Yes, they aren’t providing 8.8.8.8 out of the goodness of their black hearts
- HenryBemis 9y ago
  And I wanted to add a similar comment, why on earth would any privacy-oriented person would use Google's 8.8.8.8 when there are other options out there? Oh, and I definitely don't buy this for Google: "The Privacy option above is based on the providers promise to do not log or share your DNS requests."
Isomer 9y ago
Google has a separate, stricter, privacy policy for Google Public DNS: https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy Basically there are two log files kept: - One for up to 48 hours which contains IP addresses, which is used for handling abuse. - One is permanent which doesn't contain any personal identifying information (eg IP addresses), which is used for things like internal performance monitoring, load testing, and tracking frequency of longer term abuse etc. Google provides Google public DNS because if you see the internet as being slow because of poor DNS performance, then you don't use websearch as much. Google doesn't need to use Google Public DNS to track users, and would rather not have the information (as it makes it available for government requests etc which are a major pain to deal with). But running a large scale recursive DNS server tends to attract a _lot_ of abuse, both intentional, and unintentional as I'm sure 9.9.9.9 and 1.1.1.1 are discovering. Google provides Google Public DNS because a lot of ISPs provide extremely poor default recursive nameservers (having tiny caches, dropping queries due to overload, not implementing IPv6, DNSSEC validation, EDNS0 payload size, or other important modern DNS features. Some ISPs also hijack domains for their own purposes, or "stretching" DNS TTLs etc) so providing a better alternative to improve overall Internet use is clearly in Google's best interest. Having other public resolvers, with different trade offs is clearly better for everyone, including Google as long as they are reliable, trustworthy, and provide low latency responses. Good luck to everyone who's joining in the fun of running a planet scale recursive DNS server. (Disclaimer: I have previously worked on Google Public DNS, but no longer do)
- cpeterso 9y ago
  Do you know if Chrome uses Google Public DNS by default? I've heard it does for performance and avoiding problems with ISPs' crappy DNS. I imagine it would still need to fall back to local DNS to resolve names on enterprise intranets.
  - Isomer 9y ago
    This is outside my area of expertise. My uninformed assumption is that chrome generally uses whatever is configured in the system resolver, otherwise things like captive portals, and split horizon DNS wouldn't work properly, but I don't specifically know.
jankeymeulen 9y ago
You've got any proof, indication or even slight hint for this? Aggregate data is indeed used for all kinds of analytics, but individual IP addresses aren't tracked nor kept for more than 48 hours - to combat abuse. (Disclaimer: I'm a Google corporate shill)

I presume that Google uses this as part of it's surveillance operation.

gaius 9y ago

Yes, they aren’t providing 8.8.8.8 out of the goodness of their black hearts

HenryBemis 9y ago
And I wanted to add a similar comment, why on earth would any privacy-oriented person would use Google's 8.8.8.8 when there are other options out there? Oh, and I definitely don't buy this for Google: "The Privacy option above is based on the providers promise to do not log or share your DNS requests."

Isomer 9y ago

Google has a separate, stricter, privacy policy for Google Public DNS: https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy Basically there are two log files kept: - One for up to 48 hours which contains IP addresses, which is used for handling abuse. - One is permanent which doesn't contain any personal identifying information (eg IP addresses), which is used for things like internal performance monitoring, load testing, and tracking frequency of longer term abuse etc. Google provides Google public DNS because if you see the internet as being slow because of poor DNS performance, then you don't use websearch as much. Google doesn't need to use Google Public DNS to track users, and would rather not have the information (as it makes it available for government requests etc which are a major pain to deal with). But running a large scale recursive DNS server tends to attract a _lot_ of abuse, both intentional, and unintentional as I'm sure 9.9.9.9 and 1.1.1.1 are discovering. Google provides Google Public DNS because a lot of ISPs provide extremely poor default recursive nameservers (having tiny caches, dropping queries due to overload, not implementing IPv6, DNSSEC validation, EDNS0 payload size, or other important modern DNS features. Some ISPs also hijack domains for their own purposes, or "stretching" DNS TTLs etc) so providing a better alternative to improve overall Internet use is clearly in Google's best interest. Having other public resolvers, with different trade offs is clearly better for everyone, including Google as long as they are reliable, trustworthy, and provide low latency responses. Good luck to everyone who's joining in the fun of running a planet scale recursive DNS server. (Disclaimer: I have previously worked on Google Public DNS, but no longer do)

cpeterso 9y ago
Do you know if Chrome uses Google Public DNS by default? I've heard it does for performance and avoiding problems with ISPs' crappy DNS. I imagine it would still need to fall back to local DNS to resolve names on enterprise intranets.
- Isomer 9y ago
  This is outside my area of expertise. My uninformed assumption is that chrome generally uses whatever is configured in the system resolver, otherwise things like captive portals, and split horizon DNS wouldn't work properly, but I don't specifically know.

jankeymeulen 9y ago

You've got any proof, indication or even slight hint for this? Aggregate data is indeed used for all kinds of analytics, but individual IP addresses aren't tracked nor kept for more than 48 hours - to combat abuse. (Disclaimer: I'm a Google corporate shill)