2 ms·
>>I like the idea of popularizing using IP addresses for personal sites. I like that too, but I would have to figure there is a big-web where they just don't c
by fuzzfactor 1y ago
>>I like the idea of popularizing using IP addresses for personal sites.
I like that too, but I would have to figure there is a big-web where they just don't care what you & I like to begin with :\
"Zero trust" DNS is steadily closing in on Windows, and that can be a pretty significant portion of web users.
https://4sysops.com/archives/windows-11-zero-trust-dns-ztdns-only-permit-outbound-connections-via-protective-dns/ https://4sysops.com/archives/windows-11-zero-trust-dns-ztdns...
>ZTDNS enforces strict controls by default, blocking all network connections unless the IP address is resolved through a Protective DNS. As a result, computers are unable to connect to destinations using IP addresses directly.
Last year it was guinea-pigged:
https://techcommunity.microsoft.com/blog/networkingblog/announcing-zero-trust-dns-private-preview/4110366 https://techcommunity.microsoft.com/blog/networkingblog/anno...
Now the zthelper Service has been implanted inside Win 11 from a recent package, it's dormant but if you want to try it out there are some recommendations, closely accompanied by troubleshooting approaches:
https://techcommunity.microsoft.com/blog/networkingblog/announcing-public-preview-of-zero-trust-dns/4405802 https://techcommunity.microsoft.com/blog/networkingblog/anno...
https://techcommunity.microsoft.com/blog/networkingblog/troubleshooting-zero-trust-dns/4405808 https://techcommunity.microsoft.com/blog/networkingblog/trou...
Looks like trouble is very much to be expected, and it could take a while for enterprise to accommodate it. But once that point is reached I imagine a remote trigger would be pulled and the blast radius would increase dramatically to include all Windows, sometime after Windows 10 is no longer with us. Mowing down small-webs as collateral damage.