nanog mailing list archives
Re: [EXTERNAL] DNS filtering in practice, Re: Charter DNS servers returning malware filtered IP addresses
From: "John Levine" <johnl () iecc com>
Date: 28 Oct 2023 12:13:28 +0200
It appears that Michael Thomas <mike () mtcc com> said:
If you're one of the small minority of retail users that knows enough about the technology to pick your own resolver, go ahead. But it's a reasonable default to keep malware out of Grandma's iPad.How does this line up with DoH? Aren't they using hardwired resolver addresses? I would hope they are not doing anything heroic.
Generally, no. I believe that Chrome probes whatever resolver is configured into the system and uses that if it does DoH or DoT. At one point Firefox was going to send everything to their favorite DoH resolver but they got a great deal of pushback from people who pointed out that they had policies on their networks and they'd have to ban Firefox. Firefox responded with a lame hack where you can tell your cache to respond to some name and if so Firefox will use your resolver. R's, John
Current thread:
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses, (continued)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Jay R. Ashworth (Oct 28)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Delong.com via NANOG (Oct 28)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses John R. Levine (Oct 29)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Livingood, Jason via NANOG (Oct 30)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses John R. Levine (Oct 30)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Livingood, Jason via NANOG (Oct 30)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Compton, Rich A (Oct 30)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Owen DeLong via NANOG (Oct 30)
- Re: [EXTERNAL] Charter DNS servers returning malware filtered IP addresses Tim Burke (Oct 30)
- Re: [EXTERNAL] Re: Charter DNS servers returning malware filtered IP addresses Michael Thomas (Oct 27)
- Re: [EXTERNAL] DNS filtering in practice, Re: Charter DNS servers returning malware filtered IP addresses John Levine (Oct 29)
- Re: [EXTERNAL] Re: Charter DNS servers returning malware filtered IP addresses Eric Kuhnke (Oct 27)
- Re: [EXTERNAL] Re: Charter DNS servers returning malware filtered IP addresses Glenn McGurrin via NANOG (Oct 28)
- Re: [EXTERNAL] Re: Charter DNS servers returning malware filtered IP addresses Glenn Kelley (Oct 29)
- RE: Charter DNS servers returning invalid IP addresses Greg Dickinson (Oct 25)
- Re: Charter DNS servers returning invalid IP addresses Bryan Fields (Oct 25)
- Re: Charter DNS servers returning invalid IP addresses J. Hellenthal via NANOG (Oct 26)
- Re: Charter DNS servers returning invalid IP addresses John Levine (Oct 27)