3 ms·
Court Orders Cloudflare’s DNS Resolver to Block Pirate Sites in Italy
- Avamander 4y agoAre they legally required to also lie about or forge DNSSEC? Assuming the site's zone is signed and if my local resolver asks for (or checks) DNSSEC status, I should get an error (or a failing signature)? Just a random thought really, but if they have to, how far is a similar ruling that forces something similar with HTTPS or even ESNI?
- cmeacham98 4y agoThey will probably return a SERVFAIL rather than lie about the record itself with an NXDOMAIN.