3 ms·
Some ISP-provided resolvers fraudulently replace NXDOMAIN responses with NOERROR IN As pointing to (ironically, in this context) advertisment sites.
by a1369209993 9y ago
Some ISP-provided resolvers fraudulently replace NXDOMAIN responses with NOERROR IN As pointing to (ironically, in this context) advertisment sites.
- xenophonf 9y agoI'm aware of the problems with ISP-provided resolvers. I meant running your own resolver, like named, which queries the root zones itself, supports DNSSEC response authentication, etc.
- a1369209993 9y agoIn that case: local resolvers involve actually installing and configuring a recursive dns server, which isn't everyone's idea of fun, whereas 1.1/8.8.8.8 can be set up with a one line config file edit and then forgotten about.