24 ms·
Dns.Watch: Public DNS Servers
- bovermyer 6y agoDue diligence: who runs this and why should I trust them?
- deleted 6y ago[deleted]
- SecurityLagoon 6y agoAgreed. Pointing your DNS at an untrusted provider is asking for your connections to be hijacked.
- ju-st 6y agoLook at the sponsors page
- dewey 6y agoThe one that's empty?
- foolmeonce 6y agoAnd if for example companies now donate, does that now make it trustable? Quad9 seems to be a valid 501 org, there must be an equivalent in germany?
- bwoodcock 6y agoThe irony being that for us (Quad9) the majority of the tinfoil-hat complaints are that companies donating to a non-profit make it _less_ trustworthy. Can't win either way. :-)
- ju-st 6y agoBelow the BTC address is a link to a blog which is actually the personal page of somebody who claims in "projects" that dns.watch is his project.
- dewey 6y agoIndeed, that also matches with the name on the AS ("formerly Ideal-Hosting UG"). Risky to run something without imprint in Germany.
- LinuxBender 6y agoHosted at diva-e datacenters GmbH [1] Netblock registration [2] and the domain uses privacy protection for whois under GoDaddy. [3] [1] - https://bgp.he.net/ip/84.200.69.80 https://bgp.he.net/ip/84.200.69.80 [2] - https://bgp.he.net/ip/84.200.69.80#_whois https://bgp.he.net/ip/84.200.69.80#_whois [3] - https://bgp.he.net/dns/dns.watch#_whois https://bgp.he.net/dns/dns.watch#_whois
- pul 6y agoAnd the site is hosted on Digital Ocean: https://www.nslookup.io/dns-records/dns.watch https://www.nslookup.io/dns-records/dns.watch
- monkaiju 6y agoSorry how did you determine they're running on DO? I only see ns30.dns4pro.com. like records under NS
- LinuxBender 6y agoThey did a forward lookup of dns.watch then looked up the IP. [1] [1] - https://bgp.he.net/ip/46.101.124.30 https://bgp.he.net/ip/46.101.124.30
- XzetaU8 6y agoinitially behind this project was a hosting company called Ideal-Hosting UG (haftungsbeschränkt) which then changed its name to IAMONSYS GmbH, and in 2018 ceased to operate. https://lists.dns-oarc.net/pipermail/dns-operations/2014-August/012051.html https://lists.dns-oarc.net/pipermail/dns-operations/2014-Aug... https://web.archive.org/web/20181229211752/https://iamonsys.com/ https://web.archive.org/web/20181229211752/https://iamonsys.... https://german-hoeffner.net/about/projects https://german-hoeffner.net/about/projects
- WarOnPrivacy 6y agoDisappointed I can't watch DNS servers IRT. Or learn what that might look like.
- qwertox 6y agoYeah, I also was disappointed because of this.
- Hitton 6y agoAt first glance it looks great but at second it seems kinda sketchy. I see no info on which organization is running it and why should they be trusted. And even though it boasts about "no censorship", they write the "service provided ... from Germany" - Germany isn't known for being bastion of free speech[1][2]. [1]: https://nymag.com/intelligencer/2016/04/germany-to-prosecute-comic-for-mocking-erdogan.html https://nymag.com/intelligencer/2016/04/germany-to-prosecute... [2]: https://www.washingtonpost.com/world/europe/germany-springs-to-action-over-hate-speech-against-migrants/2016/01/06/6031218e-b315-11e5-8abc-d09392edc612_story.html https://www.washingtonpost.com/world/europe/germany-springs-...
- s_dev 6y ago>Germany isn't known for being bastion of free speech[1][2]. Germany isn't known for free speech but does have some of the strictest privacy laws in the world. https://en.wikipedia.org/wiki/Bundesdatenschutzgesetz https://en.wikipedia.org/wiki/Bundesdatenschutzgesetz
- qwertox 6y agoBut it only attempts to protect you from companies. If the government believes a domain to be an illegal resource, it has all the necessary legal tools available to force them to censor it. Edit: Also, since it is hosted in Germany, or at least offered as a German product, it should be required to contain an Imprint (Impressum), which this site doesn't have. I agree with this being a pretty sketchy service.
- leifg 6y agoOh really? Which laws/legal tools/precedences are you referring to?
- stonesweep 6y agoTook me all of 2 minutes to Google. https://dejure.org/gesetze/TMG/5.html https://dejure.org/gesetze/TMG/5.html https://translate.google.com/translate?sl=auto&tl=en&u=https://dejure.org/gesetze/TMG/5.html https://translate.google.com/translate?sl=auto&tl=en&u=https...
- jgrahamc 6y agoDoes this support DNS-over-HTTPS or DNS-over-TLS?
- WarOnPrivacy 6y agoThis is the closest thing I can find to an updated list of DoT servers. https://kb.adguard.com/en/general/dns-providers https://kb.adguard.com/en/general/dns-providers There's no reference to DoT in DNS Watch's entry. note: An updated list would contain OSZX's 51.38.83.141
- circularfoyers 6y agoThe DNS servers used in DNSCrypt would be a more updated list of DoT (DoH and DNSCrypt) servers I would imagine. https://dnscrypt.info/public-servers https://dnscrypt.info/public-servers
- kseistrup 6y agoIn the same family: Uncensored DNS ⌘ https://blog.uncensoreddns.org/ https://blog.uncensoreddns.org/
- hundchenkatze 6y agoSorry, this is off topic. I hadn't seen the looped square symbol used beyond the Mac command key, but it turns out that it signifies a place of interest in many locales. https://en.wikipedia.org/wiki/Looped_square#Modern_use https://en.wikipedia.org/wiki/Looped_square#Modern_use
- kseistrup 6y agoYes, that's why I used it: place of interest
- ed25519FUUU 6y agoThis reminds me a little of Parler, where many (most?) persona non grata conservatives were gathered before the service was wiped off the web in one night. Even an “uncensored” and freedom-touting service is very vulnerable if it becomes too popular. Decentralization is best, diversification is better.
- gowthamgts12 6y agoAs others mentioned, no idea who runs this and also DNS queries are slower from Chennai, India. I'm getting 400ms and it's much higher than others (30ms for google dns and 50ms for cloudflare) I think it's located on Germany and will be faster for people in EU region.
- darkwater 6y agoIndeed. I get 40-50ms from Europe (not Germany).
- JosephRedfern 6y agoAbout 28ms here (UK).
- umvi 6y agoOne of their stated goals is "DNS Neutrality" - has the domain of a legal (but unpopular) website (such as a neonazi blog, etc) ever been knocked offline from a DNS standpoint by activist private corps? Or is this a preventive measure?
- MrCandyCane 6y agoWhile I am no prude the 'No Bullshit' right there in big letters while appealing to a certain demographic isn't especially 'professional looking'. Also I am not sure what the 'No BS' is supposed to be saying apart from being provocative - which I don't really look for in a DNS provider. Or as my Grandpa would say .. "Grow up".
- f311a 6y agoDNS data worth a lot nowadays. I would not trust this site.
- heipei 6y agoEvery piece of user-generated data nowadays has value, DNS services are no exception. You can turn the data right back around and sell a Passive-DNS datafeed...
- Ericson2314 6y agoI used to use this for a bit, but I noticed a bunch of random things were missing, like llvm.org. How weird!
- rasengan 6y agoYou could also try running your own Handshake [1] node or SPV revolver [2] for uncensored DNS results. [1] https://handshake.org https://handshake.org [2] https://GitHub.com/handshake-org/hnsd https://GitHub.com/handshake-org/hnsd
- overcast 6y agoConsidering that it's literally called DNS "Watch". Pass.
- rubyist5eva 6y agoNextDNS.io is all you need.
- Nux 6y ago127.0.0.1 is all you need.
- smarx007 6y agoWhere is Impressum & Datenschutz if it's a German site?
- joshxyz 6y agoIs 1.1.1.1 censored in any way?
- Ayesh 6y agoNo. They have 1.1.1.1 for families, that they block certain sites.
- Triv888 6y agonot censored but they block sites?
- jshier 6y ago1.1.1.1 is just their product name. 1.1.1.1 for Families actually uses 1.1.1.2, and it filters things. 1.1.1.1 the actual resolver does not.
- evgen 6y ago1.1.1.1 is not censored. There are other variant resolvers run by Cloudflare that trade on the 1.1.1.1 'brand' but which are filtered for kids. These resolvers run on 1.1.1.2 and 1.1.1.3 for different levels of filtering.
- jcims 6y agoI would argue that 'is' or 'is not' censored isn't a useful distinction. The question I would have is what circumstances could compel the provider to de-list/censor the addresses, or their service-providers/supply-chain to drop support for them. The hierarchical nature of the present Internet DNS infrastructure is fundamentally vulnerable to 'censorship'.
- circularfoyers 6y ago1.1.1.1 doesn't block anything, but they have 1.1.1.2 that blocks malware and 1.1.1.3 that blocks malware and adult content.
- 6y ago
- PeterStuer 6y agoIt says "Served from Germany", but the IP block is owned by Proximus Group, Belgium's largest majority state owned telecoms operator.
- jyap 6y agoI’d downvote this if I could. Not much details on this. People just blindly upvoting this to #1 with no research? Also a possible security risk/attack on HN users.
- hundchenkatze 6y agoI can't fully speak to their credibility, but I doubt it's an attack on HN users. I've heard of them outside of HN. If it is an attack on HN users specifically, then they're playing the long con. The first post to HN was 6.5 years ago. https://news.ycombinator.com/from?site=dns.watch https://news.ycombinator.com/from?site=dns.watch Previous discussion: https://news.ycombinator.com/item?id=8060156 https://news.ycombinator.com/item?id=8060156
- heipei 6y agoLOL, run from Germany, no Impressum (imprint), clearly designed for commercial gain, clearly collecting PII and possibly reselling it, accepts donation via BTC, this is triggering so many privacy and legal red flags I don't even know where to start.
- skrause 6y agoIt also has static query "statistics" at the bottom which suggest heavy use, which are most likely made up and haven't been updated since 2016: https://web.archive.org/web/20160328163252/https://dns.watch/index https://web.archive.org/web/20160328163252/https://dns.watch...
- williesleg 6y agoOh that's a great idea I'm gonna point everything there! Thank you!
- leipert 6y agoAs others point out, the link above seems sketchy and you shouldn't use it. Which DNS servers do you use / trust and why? For me it is: - DNS from digitalcourage (non-profit fighting for all kind of digital rights): https://digitalcourage.de/support/zensurfreier-dns-server https://digitalcourage.de/support/zensurfreier-dns-server - DNS from dismail (https://dismail.de/ https://dismail.de/), potentially should double check my trust - LibreDNS: https://libredns.gr/ https://libredns.gr/ (a colleague of mine is on the team and they run their stuff open source)
- brobdingnagians 6y agoThank you for pointing this out and giving the alternate, I'm going to switch to LibreDNS.