zlacker

[parent] [thread] 4 comments
1. ikeboy+(OP)[view] [source] 2019-05-04 19:37:04
Are there any other known sites that don't work with 1.1.1.1 but work fine on other resolvers?
replies(2): >>eastda+A >>wolfga+b1
◧
2. eastda+A[view] [source] 2019-05-04 19:41:45
>>ikeboy+(OP)
Typically, if you experience that, it’s because DNSSEC fails. 1.1.1.1 enforces DNSSEC. As does 8.8.8.8 in most, but not all, cases. Many other DNS resolvers do not enforce DNSSEC. Archive.is (and its directly affiliated sites) are the only exception like this I am aware of. And, to be clear, as a policy the 1.1.1.1 DNS does not block any sites from resolution.
◧
3. wolfga+b1[view] [source] 2019-05-04 19:45:22
>>ikeboy+(OP)
I (random HN user) happen to know of lancaster.ac.uk (there was a comment thread a while back where this was mentioned).
replies(2): >>judge2+m2 >>Smyler+wI
◧◩
4. judge2+m2[view] [source] [discussion] 2019-05-04 19:54:42
>>wolfga+b1
This is a problem of the 1^4 resolver not implementing DNAME support (either not a priority, or just in the backlog): https://community.cloudflare.com/t/www-lancaster-ac-uk-not-r...
◧◩
5. Smyler+wI[view] [source] [discussion] 2019-05-05 06:35:52
>>wolfga+b1
In what way doesn't it work? This is with my ISP's DNS (using which I can visit https://www.lancaster.ac.uk/ in a browser):

  $ host -t a lancaster.ac.uk
  lancaster.ac.uk has address 148.88.65.80
and this is with Cloudflare's:

  $ host -t a lancaster.ac.uk 1.1.1.1
  Using domain server:
  Name: 1.1.1.1
  Address: 1.1.1.1#53
  Aliases: 
  
  lancaster.ac.uk has address 148.88.65.80
Looks the same to me.
[go to top]