zlacker

[return to "Does Cloudflare's 1.1.1.1 DNS Block Archive.is? (2019)"]
1. dimens+36[view] [source] 2021-09-11 20:25:12
>>jahnu+(OP)
amazing how cloudflare has framed this anticompetitve move as a privacy thing.

it doesn't matter if your dns resolver leaks part of your ip address to archive.is's dns servers when you're about to connect to archive.is from your ip address anyway. the only thing dropping the edns client subnet does is prevent services you use from giving you a server that's closer to you when you do the dns lookup. this performance issue, of course, does not affect sites using cloudflare.

◧◩
2. akerl_+I8[view] [source] 2021-09-11 20:40:53
>>dimens+36
Just so we’re on the same page: Cloudflare decided globally not to include client IP in the EDNS data. Then archive.is decided to block Cloudflare’s resolvers from getting accurate records for their site.

To circumvent this, Cloudflare would have to reverse their global stance or make a special exception to satisfy archive.is.

It’s unclear how we could draw “anticompetitive” from this.

◧◩◪
3. raxi+Dg[view] [source] 2021-09-11 21:31:43
>>akerl_+I8
Cloudflare (Matthew Prince personally, here on Hacker News few months ago) said that they do reverse that their global stance for Netflix and some other megacorps.

So this is a super-premium feature unavailable to small players.

CloudFlare just changed how DNS behaved and charge corps to make it work as it worked before CloudFlare entered the stage.

◧◩◪◨
4. akerl_+7h[view] [source] 2021-09-11 21:35:42
>>raxi+Dg
Do you have a citation for that? Sourcing from https://news.ycombinator.com/item?id=19828702 , they don’t reverse their global stance for large providers. Their stance is ~”Including client IP via EDNS violates our goal of maximizing user data privacy”, and what they’re working on with other large-scale providers is a way to improve geo-resolution without weakening user privacy.
◧◩◪◨⬒
5. raxi+Zi[view] [source] 2021-09-11 21:49:00
>>akerl_+7h
Exactly on your link, just ctrl-F for "Netflix":

"We are working with the small number of networks with a higher network/ISP density than Cloudflare (e.g., Netflix, Facebook, Google/YouTube) to come up with an EDNS IP Subnet alternative that gets them the information they need for geolocation".

Well, I might be inaccurate in saying "exactly the same protocol as before", but it is clear that what was available to every webmaster via EDNS, now available only to members of a closed club, via good old EDNS or a proprietary alternative. The latter is more likely, not because of privacy-caring, but because they could now charge it as license fee for using private protocol.

◧◩◪◨⬒⬓
6. akerl_+Dj[view] [source] 2021-09-11 21:53:18
>>raxi+Zi
EDNS is an optional field. Client subnet is an optional part of that optional field. It’s relatively new compared to DNS as a whole, and most “webmasters” don’t make active use of it.

The quote you pulled is about Cloudflare’s efforts to build a better standard. They’re talking to the people with the expertise and interest to build that standard. You’ve inferred “proprietary” and “closed club”, and a ton of motive besides, and you’ve copy-pasted that speculation as if it were fact into multiple comment trees.

◧◩◪◨⬒⬓⬔
7. raxi+yk[view] [source] 2021-09-11 22:03:22
>>akerl_+Dj
1. EDNS is needless when you are using your provider DNS. It is needed for public DNS servers. So it is optional, as is needless most of the time. Before launching Cloudflare DNS, the biggest public DNS service was Googles, who developed and implemented EDNS. Then comes Cloudflare and "the people with the expertise and interest" to rethink that.

2. I assume that commercial companies are here to make money, not "a better future" (besides the better future for the shareholders). If they implement something, the first question is how do they make money with it.

[go to top]