3 ms·
So what we need is a DNS service that takes in all of the DNS record updates per normal DNS replication and flags these CNAME record entries into an easily cons
by iramiller 7y ago
So what we need is a DNS service that takes in all of the DNS record updates per normal DNS replication and flags these CNAME record entries into an easily consumable blocklist.
- EvanAnderson 7y agoDNS-based filtering will be useless once DNS-over-HTTPS and pinned certificates are the norm. That will come to embedded devices first, but it'll come to consumer OS's too.
- iramiller 7y agoRight. But it is still possible to run a DNS resolver and dump those domains in a address based blacklist at the firewall.