3 ms·

how long does Cloudflare or NextDNS retain dns query logs?

by leeoniya 7y ago

kevin_thibedeau 7y ago
24h except for "sampling".
- djsumdog 7y ago
  I still don't trust them. Clouldflare is simply way too big and has done a lot of shady controversial stuff. I also feel like this is breaking something fundamental about the operating system. DNS queries are now going to be different between your browser and ... the rest of your operating system. How does Firefox deal with corporate installations and internal DNS?
  - Avamander 7y ago
    > How does Firefox deal with corporate installations and internal DNS? Everything is configurable and there are canaries to override that.
    - asymptotically2 7y ago
      > Everything is configurable But how many people are going to change it from the default?
      - Jonnax 7y ago
        A corporate environment or internal DNS is already changing the defaults.
      - jedieaston 7y ago
        It is disabled by default in Firefox ESR and enterprise environments are already using GPO to manage it anyway.
  - close04 7y ago
    Firefox will detect when it has enterprise administrative policies set and disable DoH. The parental control topic though is still very much open. Mozilla's statement is that they are "working with the industry to define appropriate standards that will enable smooth functioning of opt-in parental controls" provided by ISP. No word on when or if only these ISP controls will be considered.
godshatter 7y ago
Also, why limit the choices to just those two? If you're going to provide an app-based service for this, why not allow the user to use any DoH server they want to use? Did Mozilla make some kind of deal with Cloudflare and NextDNS?
- damnyou 7y ago
  You can use your own resolver.
- cpeterso 7y ago
  The Firefox settings UI allows the user to set a custom DoH server. For example, Quad9 is yet another DNS provider that hosts DoH servers: https://www.quad9.net/doh-quad9-dns-servers/ https://www.quad9.net/doh-quad9-dns-servers/
- qmarchi 7y ago
  They have contracts with Cloudflare and NextDNS to limit what information can be collected, retention policies, and explicitly saying that it can't be sold.
101404 7y ago
Only the NSA will know. Isn't it them who send those secret letters to US companies?

how long does Cloudflare or NextDNS retain dns query logs?

kevin_thibedeau 7y ago

24h except for "sampling".

djsumdog 7y ago
I still don't trust them. Clouldflare is simply way too big and has done a lot of shady controversial stuff. I also feel like this is breaking something fundamental about the operating system. DNS queries are now going to be different between your browser and ... the rest of your operating system. How does Firefox deal with corporate installations and internal DNS?
- Avamander 7y ago
  > How does Firefox deal with corporate installations and internal DNS? Everything is configurable and there are canaries to override that.
  - asymptotically2 7y ago
    > Everything is configurable But how many people are going to change it from the default?
    - Jonnax 7y ago
      A corporate environment or internal DNS is already changing the defaults.
    - jedieaston 7y ago
      It is disabled by default in Firefox ESR and enterprise environments are already using GPO to manage it anyway.
- close04 7y ago
  Firefox will detect when it has enterprise administrative policies set and disable DoH. The parental control topic though is still very much open. Mozilla's statement is that they are "working with the industry to define appropriate standards that will enable smooth functioning of opt-in parental controls" provided by ISP. No word on when or if only these ISP controls will be considered.

godshatter 7y ago

Also, why limit the choices to just those two? If you're going to provide an app-based service for this, why not allow the user to use any DoH server they want to use? Did Mozilla make some kind of deal with Cloudflare and NextDNS?

damnyou 7y ago
You can use your own resolver.
cpeterso 7y ago
The Firefox settings UI allows the user to set a custom DoH server. For example, Quad9 is yet another DNS provider that hosts DoH servers: https://www.quad9.net/doh-quad9-dns-servers/ https://www.quad9.net/doh-quad9-dns-servers/
qmarchi 7y ago
They have contracts with Cloudflare and NextDNS to limit what information can be collected, retention policies, and explicitly saying that it can't be sold.

101404 7y ago

Only the NSA will know. Isn't it them who send those secret letters to US companies?