3 ms·
> usually around Active Directory implementations where brain-damaged people have named the AD domain the same as a public Internet domain name I don't like th
by vetinari 8y ago
> usually around Active Directory implementations where brain-damaged people have named the AD domain the same as a public Internet domain name
I don't like this one either, but often it is inherited from the past from other people and it is not going to change.
On the other hand, split-horizon DNS is going to stay with us, even if the AD domain is a subdomain of the public one. Records in the internal zone are not going to become public anytime soon.
- selenamarie 8y agoA subdomain that doesn't resolve is handled properly -- meaning DoH is then disabled.
- vetinari 8y agoDidn't know that, great, thanks. On the other of the common problems: I assume there is no way to blackhole existing, public records, other than extension ala uBlock/Adblock?
- selenamarie 8y agoWe're working on exceptions support, which would allow specific domains to be looked up via DNS instead of DoH. In that case, mirroring a blackhole list to the exceptions support would result in what you want (I mean, if I understand what you're asking).