4 ms·

Due diligence: who runs this and why should I trust them?

by bovermyer 6y ago

deleted 6y ago
[deleted]
SecurityLagoon 6y ago
Agreed. Pointing your DNS at an untrusted provider is asking for your connections to be hijacked.
ju-st 6y ago
Look at the sponsors page
- dewey 6y ago
  The one that's empty?
  - foolmeonce 6y ago
    And if for example companies now donate, does that now make it trustable? Quad9 seems to be a valid 501 org, there must be an equivalent in germany?
    - bwoodcock 6y ago
      The irony being that for us (Quad9) the majority of the tinfoil-hat complaints are that companies donating to a non-profit make it _less_ trustworthy. Can't win either way. :-)
  - ju-st 6y ago
    Below the BTC address is a link to a blog which is actually the personal page of somebody who claims in "projects" that dns.watch is his project.
    - dewey 6y ago
      Indeed, that also matches with the name on the AS ("formerly Ideal-Hosting UG"). Risky to run something without imprint in Germany.
LinuxBender 6y ago
Hosted at diva-e datacenters GmbH [1] Netblock registration [2] and the domain uses privacy protection for whois under GoDaddy. [3] [1] - https://bgp.he.net/ip/84.200.69.80 https://bgp.he.net/ip/84.200.69.80 [2] - https://bgp.he.net/ip/84.200.69.80#_whois https://bgp.he.net/ip/84.200.69.80#_whois [3] - https://bgp.he.net/dns/dns.watch#_whois https://bgp.he.net/dns/dns.watch#_whois
- pul 6y ago
  And the site is hosted on Digital Ocean: https://www.nslookup.io/dns-records/dns.watch https://www.nslookup.io/dns-records/dns.watch
  - monkaiju 6y ago
    Sorry how did you determine they're running on DO? I only see ns30.dns4pro.com. like records under NS
    - LinuxBender 6y ago
      They did a forward lookup of dns.watch then looked up the IP. [1] [1] - https://bgp.he.net/ip/46.101.124.30 https://bgp.he.net/ip/46.101.124.30
XzetaU8 6y ago
initially behind this project was a hosting company called Ideal-Hosting UG (haftungsbeschränkt) which then changed its name to IAMONSYS GmbH, and in 2018 ceased to operate. https://lists.dns-oarc.net/pipermail/dns-operations/2014-August/012051.html https://lists.dns-oarc.net/pipermail/dns-operations/2014-Aug... https://web.archive.org/web/20181229211752/https://iamonsys.com/ https://web.archive.org/web/20181229211752/https://iamonsys.... https://german-hoeffner.net/about/projects https://german-hoeffner.net/about/projects

Due diligence: who runs this and why should I trust them?

deleted 6y ago

[deleted]

SecurityLagoon 6y ago

Agreed. Pointing your DNS at an untrusted provider is asking for your connections to be hijacked.

ju-st 6y ago

Look at the sponsors page

dewey 6y ago
The one that's empty?
- foolmeonce 6y ago
  And if for example companies now donate, does that now make it trustable? Quad9 seems to be a valid 501 org, there must be an equivalent in germany?
  - bwoodcock 6y ago
    The irony being that for us (Quad9) the majority of the tinfoil-hat complaints are that companies donating to a non-profit make it _less_ trustworthy. Can't win either way. :-)
- ju-st 6y ago
  Below the BTC address is a link to a blog which is actually the personal page of somebody who claims in "projects" that dns.watch is his project.
  - dewey 6y ago
    Indeed, that also matches with the name on the AS ("formerly Ideal-Hosting UG"). Risky to run something without imprint in Germany.

LinuxBender 6y ago

Hosted at diva-e datacenters GmbH [1] Netblock registration [2] and the domain uses privacy protection for whois under GoDaddy. [3] [1] - https://bgp.he.net/ip/84.200.69.80 https://bgp.he.net/ip/84.200.69.80 [2] - https://bgp.he.net/ip/84.200.69.80#_whois https://bgp.he.net/ip/84.200.69.80#_whois [3] - https://bgp.he.net/dns/dns.watch#_whois https://bgp.he.net/dns/dns.watch#_whois

pul 6y ago
And the site is hosted on Digital Ocean: https://www.nslookup.io/dns-records/dns.watch https://www.nslookup.io/dns-records/dns.watch
- monkaiju 6y ago
  Sorry how did you determine they're running on DO? I only see ns30.dns4pro.com. like records under NS
  - LinuxBender 6y ago
    They did a forward lookup of dns.watch then looked up the IP. [1] [1] - https://bgp.he.net/ip/46.101.124.30 https://bgp.he.net/ip/46.101.124.30

XzetaU8 6y ago

initially behind this project was a hosting company called Ideal-Hosting UG (haftungsbeschränkt) which then changed its name to IAMONSYS GmbH, and in 2018 ceased to operate. https://lists.dns-oarc.net/pipermail/dns-operations/2014-August/012051.html https://lists.dns-oarc.net/pipermail/dns-operations/2014-Aug... https://web.archive.org/web/20181229211752/https://iamonsys.com/ https://web.archive.org/web/20181229211752/https://iamonsys.... https://german-hoeffner.net/about/projects https://german-hoeffner.net/about/projects