5 ms·

http://archive.is/IWOo5 http://archive.is/IWOo5

StavrosK 6y ago
That link redirects me to https://ungleich.ch/en-us/cms/blog/2019/09/11/turn-off-doh-firefox/ https://ungleich.ch/en-us/cms/blog/2019/09/11/turn-off-doh-f..., which, what the hell? It also seems to be conflating me using CloudFlare's DNS with me using DoH. Also, they're ironically removing my choice, because I chose CloudFlare's DNS yet I can't see the content because of that.
- Operyl 6y ago
  Sounds about right given Archive.is has this feud going on with Cloudflare. https://jarv.is/notes/cloudflare-dns-archive-is-blocked/ https://jarv.is/notes/cloudflare-dns-archive-is-blocked/
  - StavrosK 6y ago
    I guess, but being against DoH just because the default for that is Cloudflare is throwing the baby out with the bathwater.
    - Operyl 6y ago
      Yeah, who even knows. I think it's all petty to be honest.
      - StavrosK 6y ago
        I spoke with the creator of archive.is a while back, he uses the location from DNS to protect archive.is against some attacks, and the Cloudflare cache breaks things for him because they return the cached result instead of a live one. It's an unfortunate situation, but it doesn't look like an easy solution exists on either side.
        Operyl 6y ago
        Cloudflare denied that though.
        StavrosK 6y ago
        As far as I know, Cloudflare said they tried to work with him, I don't know anything about denying caching.
        Operyl 6y ago
        Cloudflare said they filtered EDNS subnet passthrough. They did provide alternative location data, though. Given that Cloudflare has _tons_ of data centers, in all parts of the world, this granularity seems good enough for what Archive.is required. > EDNS IP subsets can be used to better geolocate responses for services that use DNS-based load balancing. However, 1.1.1.1 is delivered across Cloudflare’s entire network that today spans 180 cities. We publish the geolocation information of the IPs that we query from. That allows any network with less density than we have to properly return DNS-targeted results. For a relatively small operator like archive.is, there would be no loss in geo load balancing fidelity relying on the location of the Cloudflare PoP in lieu of EDNS IP subnets. > We are working with the small number of networks with a higher network/ISP density than Cloudflare (e.g., Netflix, Facebook, Google/YouTube) to come up with an EDNS IP Subnet alternative that gets them the information they need for geolocation targeting without risking user privacy and security. Those conversations have been productive and are ongoing. If archive.is has suggestions along these lines, we’d be happy to consider them. https://news.ycombinator.com/item?id=19828702 https://news.ycombinator.com/item?id=19828702
        StavrosK 6y ago
        Yes, but his reply was that they cache DNS results, so someone querying from France would get the cached result, which might be in the US. Seems a bit counterintuitive, but I'm just relaying what he told me.
        6y ago

That link redirects me to https://ungleich.ch/en-us/cms/blog/2019/09/11/turn-off-doh-firefox/ https://ungleich.ch/en-us/cms/blog/2019/09/11/turn-off-doh-f..., which, what the hell? It also seems to be conflating me using CloudFlare's DNS with me using DoH. Also, they're ironically removing my choice, because I chose CloudFlare's DNS yet I can't see the content because of that.

Operyl 6y ago
Sounds about right given Archive.is has this feud going on with Cloudflare. https://jarv.is/notes/cloudflare-dns-archive-is-blocked/ https://jarv.is/notes/cloudflare-dns-archive-is-blocked/
- StavrosK 6y ago
  I guess, but being against DoH just because the default for that is Cloudflare is throwing the baby out with the bathwater.
  - Operyl 6y ago
    Yeah, who even knows. I think it's all petty to be honest.
    - StavrosK 6y ago
      I spoke with the creator of archive.is a while back, he uses the location from DNS to protect archive.is against some attacks, and the Cloudflare cache breaks things for him because they return the cached result instead of a live one. It's an unfortunate situation, but it doesn't look like an easy solution exists on either side.
      - Operyl 6y ago
        Cloudflare denied that though.
        StavrosK 6y ago
        As far as I know, Cloudflare said they tried to work with him, I don't know anything about denying caching.
        Operyl 6y ago
        Cloudflare said they filtered EDNS subnet passthrough. They did provide alternative location data, though. Given that Cloudflare has _tons_ of data centers, in all parts of the world, this granularity seems good enough for what Archive.is required. > EDNS IP subsets can be used to better geolocate responses for services that use DNS-based load balancing. However, 1.1.1.1 is delivered across Cloudflare’s entire network that today spans 180 cities. We publish the geolocation information of the IPs that we query from. That allows any network with less density than we have to properly return DNS-targeted results. For a relatively small operator like archive.is, there would be no loss in geo load balancing fidelity relying on the location of the Cloudflare PoP in lieu of EDNS IP subnets. > We are working with the small number of networks with a higher network/ISP density than Cloudflare (e.g., Netflix, Facebook, Google/YouTube) to come up with an EDNS IP Subnet alternative that gets them the information they need for geolocation targeting without risking user privacy and security. Those conversations have been productive and are ongoing. If archive.is has suggestions along these lines, we’d be happy to consider them. https://news.ycombinator.com/item?id=19828702 https://news.ycombinator.com/item?id=19828702
        StavrosK 6y ago
        Yes, but his reply was that they cache DNS results, so someone querying from France would get the cached result, which might be in the US. Seems a bit counterintuitive, but I'm just relaying what he told me.
        6y ago