3 ms·
DNS is passive, network wide and works extremely well overall. It isn't iron clad, it isn't 100% and it isn't the only thing you can use. That doesn't mean it
by BubRoss 7y ago
DNS is passive, network wide and works extremely well overall. It isn't iron clad, it isn't 100% and it isn't the only thing you can use. That doesn't mean it doesn't work.
- kazinator 7y agoIt's not going to work if you think that a black list will do it, and the problem isn't sites like Reddit, but actual porn sites (and such). You cannot have a complete, accurate black list, let alone maintain it that way. For kids, a whitelist of approved domains should work. If you don't think Reddit should be on it, you don't add Reddit. No brainer. The problem with DNS is mobile devices; your custom DNS runs only in your own intranet, not whatever devices connect to. Undoubtedly there are hacks for that, but they are mucky compared to the pure DNS solution, which can be perpetrated entirely externally to devices.
- BubRoss 7y agoAgain, this is one element that is very easy and extremely effective for the amount of effort it requires. You can still change DNS on individual devices if you want. You can still use local adblockers. You can still make individual devices use dns whitelists. Do you do all of the your movement with a car? No, it doesn't work well for very short or very long distances. That doesn't mean it doesn't work.
- abiogenesis 7y agoWhat about Google? Google Image search? Are you going to whitelist those or not? Hostname based blocking can never be accurate.
- kazinator 7y agoGoogle indiscriminately caches questionable material, so it could never go onto a whitelist. Fine-grained filtering of content within Google domains doesn't seem tractable in any way shape or form.
- parston_michel 7y agoIt absolutely doesn't work if you can trivially bypass what you're trying to block with one of the most popular sites on the internet.