3 ms·

I use nextdns, it's excellent. However beware that it's not a "set and forget" solution. Example: This morning I did my occasional sweep of what I've blocked

by buro9 7y ago

I use nextdns, it's excellent. However beware that it's not a "set and forget" solution. Example: This morning I did my occasional sweep of what I've blocked where, and to see if there's a new allowed domain in top N that should've been blocked. What I found is that ocsp.int-x3.letsencrypt.org.edgesuite.net is blocked by "kowabit.de - bl*cklist of death". I've added that to my whitelist now, I want certificate revocation to not be blocked.

HelenePhisher 7y ago
Strange, cannot find any entry related to LE in the list: https://blocklist.kowabit.de/kwbtlist.txt https://blocklist.kowabit.de/kwbtlist.txt
- buro9 7y ago
  ocsp.int-x3.letsencrypt.org.edgesuite.net matches edgesuite.net I whitelisted only the FQDN and left edgesuite.net largely blacklisted.
  - dv35z 7y ago
    FYI: *.edgesuite.net is the domain that Akamai (CDN) allocates to nearly all of their customers.
scurvy 7y ago
Why would anyone block all of Akamai? This is the problem with user-generated-lists; sometimes the user clearly has no idea what they're doing.