6 ms·

To anyone on 1.1.1.1 who can't resolve archive.is, add this line to your hosts file: 151.106.9.30 archive.is

by strombofulous 6y ago

whitepoplar 6y ago
Ugh, why can't 1.1.1.1 resolve archive.is?
- strombofulous 6y ago
  1.1.1.1 doesn't provide EDNS information, and the archive.is admin has decided that dealing with dns queries without this field is difficult/annoying and simply returns an invalid result.
  - StavrosK 6y ago
    That's not accurate, they use the information to combat abuse. EDIT: Why the downvotes?
    - tomalpha 6y ago
      To offer an honest answer to an honest question: Coming to this a couple of hours later I don't perceive what you're saying to be any different to the parent. 'Difficult/annoying to deal with' could easily match 'used to combat abuse'. An assume-good-faith reading of both of these looks the same to me. I'd guess you were downvoted for the "That's not accurate" bit.
    - microcolonel 6y ago
      I think this is more of a “yes and”, and you could have brought it up that way rather than as a “No”.
    - andreareina 6y ago
      Do you have a pointer to how they use it to combat abuse? All I've ever read from the archive.is people is that they use EDNS to return geographically-close machines. Regardless, it's a PITA and I've been avoiding archive.is links for a while now because of it.
      - StavrosK 6y ago
        I'm not sure I should say, but there are people who use legal means to take down their own material and cause trouble to archive.is. The DNS thing is to avoid leaking the servers' location, roughly.
- strken 6y ago
  Because archive.is uses DNS load balancing based on EDNS information which includes a user's IP address, and returns invalid results if that information is not present, while cloudflare's DNS hides EDNS information out of respect for the user's privacy. Previous discussion: https://news.ycombinator.com/item?id=19828317 https://news.ycombinator.com/item?id=19828317
  - tambre 6y ago
    Notably they return invalid results for queries without EDNS information from only Cloudflare.
    - yjftsjthsd-h 6y ago
      Is Cloudflare's implementation somehow different, or is it an explicit blacklist of some kind?
      - Matheus28 6y ago
        They blacklist Cloudflare for petty reasons
  - nullify88 6y ago
    Alternatively, nextdns.io can anonymise the EDNS client subnet so you can browse sites like archive.is without giving out a real ip address. Perhaps cloudflare could do something similar.
    - kevincox 6y ago
      It seems silly to give out fake information to work around a stubborn site with a vendetta. I think it makes sense to provide a distinction between no information and information instead of providing incorrect information.
  - tinus_hn 6y ago
    Can’t they just send phony information that indicates the region the resolver is in?

To anyone on 1.1.1.1 who can't resolve archive.is, add this line to your hosts file: 151.106.9.30 archive.is

whitepoplar 6y ago

Ugh, why can't 1.1.1.1 resolve archive.is?

strombofulous 6y ago
1.1.1.1 doesn't provide EDNS information, and the archive.is admin has decided that dealing with dns queries without this field is difficult/annoying and simply returns an invalid result.
- StavrosK 6y ago
  That's not accurate, they use the information to combat abuse. EDIT: Why the downvotes?
  - tomalpha 6y ago
    To offer an honest answer to an honest question: Coming to this a couple of hours later I don't perceive what you're saying to be any different to the parent. 'Difficult/annoying to deal with' could easily match 'used to combat abuse'. An assume-good-faith reading of both of these looks the same to me. I'd guess you were downvoted for the "That's not accurate" bit.
  - microcolonel 6y ago
    I think this is more of a “yes and”, and you could have brought it up that way rather than as a “No”.
  - andreareina 6y ago
    Do you have a pointer to how they use it to combat abuse? All I've ever read from the archive.is people is that they use EDNS to return geographically-close machines. Regardless, it's a PITA and I've been avoiding archive.is links for a while now because of it.
    - StavrosK 6y ago
      I'm not sure I should say, but there are people who use legal means to take down their own material and cause trouble to archive.is. The DNS thing is to avoid leaking the servers' location, roughly.
strken 6y ago
Because archive.is uses DNS load balancing based on EDNS information which includes a user's IP address, and returns invalid results if that information is not present, while cloudflare's DNS hides EDNS information out of respect for the user's privacy. Previous discussion: https://news.ycombinator.com/item?id=19828317 https://news.ycombinator.com/item?id=19828317
- tambre 6y ago
  Notably they return invalid results for queries without EDNS information from only Cloudflare.
  - yjftsjthsd-h 6y ago
    Is Cloudflare's implementation somehow different, or is it an explicit blacklist of some kind?
    - Matheus28 6y ago
      They blacklist Cloudflare for petty reasons
- nullify88 6y ago
  Alternatively, nextdns.io can anonymise the EDNS client subnet so you can browse sites like archive.is without giving out a real ip address. Perhaps cloudflare could do something similar.
  - kevincox 6y ago
    It seems silly to give out fake information to work around a stubborn site with a vendetta. I think it makes sense to provide a distinction between no information and information instead of providing incorrect information.
- tinus_hn 6y ago
  Can’t they just send phony information that indicates the region the resolver is in?