zlacker

[parent] [thread] 14 comments
1. ttctci+(OP)[view] [source] 2023-08-05 07:12:28
Interesting read!

For a while now, I've had infrequently occurring arcane cert/SSL issues connecting to archive.ph and its siblings, but trying a couple of links from the article I find I can't get past an endless cycle of "one more step" captcha protection - tried clearing all cookies and revisiting an old url, but to no avail.

replies(2): >>Troubl+S >>resolu+sb
2. Troubl+S[view] [source] 2023-08-05 07:21:56
>>ttctci+(OP)
Change your DNS - you are using CF
replies(2): >>ttctci+D1 >>stonog+p6
◧◩
3. ttctci+D1[view] [source] [discussion] 2023-08-05 07:32:24
>>Troubl+S
Are you suggesting the cert problem is DNS related or the new captcha issue?

DNS was ISP, not 1.1.1.1, and I get the same behaviour after switching to 8.8.8.8.

replies(3): >>Troubl+r3 >>dredmo+p5 >>jeroen+7p
◧◩◪
4. Troubl+r3[view] [source] [discussion] 2023-08-05 07:54:11
>>ttctci+D1
>I've had infrequently occurring arcane cert/SSL issues <> Same error page as https://1.1.1.7/ ?

captcha is CF

Related: Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)

HN Discussion (209-comments 2023-08-02) >>36970702

I just snapshot this page for a test : https://archive.is/MUhAP = >>37009598

Edit of formatting for readability.

◧◩◪
5. dredmo+p5[view] [source] [discussion] 2023-08-05 08:20:48
>>ttctci+D1
Who is your ISP's DNS provider?

Do they run their own resolver, or rely on an extant service?

replies(1): >>Troubl+U6
◧◩
6. stonog+p6[view] [source] [discussion] 2023-08-05 08:32:56
>>Troubl+S
I'm using Quad 9 and getting the same results. Who is the right DNS provider?
replies(1): >>abwizz+lb
◧◩◪◨
7. Troubl+U6[view] [source] [discussion] 2023-08-05 08:39:21
>>dredmo+p5
I do Not use my ISP's DNS!

I'm reticent to disclose my current DNS provider,

given that I am able to access archive.is and many are not at this point of time.

replies(1): >>Troubl+X7
◧◩◪◨⬒
8. Troubl+X7[view] [source] [discussion] 2023-08-05 08:52:44
>>Troubl+U6
I have just checked 8.8.8.8 and they are serving the correct response now. (incorrect earlier)

Edit

I have just checked 9.9.9.9 and they are serving the correct response now. (incorrect earlier)

replies(1): >>alexol+NHA
◧◩◪
9. abwizz+lb[view] [source] [discussion] 2023-08-05 09:35:53
>>stonog+p6
if you can't trust your isp than either find someone that you can trust (by verification) or run your own resolver.

there was a recent move from the eu to have an eu-centric public resolver which brought up the question if/how the big players address country specific filtering requirements which in turn might have shed some light on the fact that gog/cf didn't care; until now.

replies(1): >>moepst+9e
10. resolu+sb[view] [source] 2023-08-05 09:37:28
>>ttctci+(OP)
archive.today is the "official" name, which redirects to the domain of choice (right now archive.md, at least for me).

archive.is is blackholed in many places.

◧◩◪◨
11. moepst+9e[view] [source] [discussion] 2023-08-05 10:13:43
>>abwizz+lb
I run Pi-hole with Unbound - set up is easy and rewards are uncensored DNS, ad-blocking etc..

Oh and - given the right adlists - may also prevent infecting your machine/network/... with malware...

Not to speak of clients which may not equipped with on-device adblockers, such as TVs etc...

◧◩◪
12. jeroen+7p[view] [source] [discussion] 2023-08-05 12:20:24
>>ttctci+D1
Archive.* sabotages their DNS records when Cloudflare queries for them. They don't like that Cloudflare doesn't do EDNS forwarding so they broke their service for people using 1.1.1.1.

That said, I have the same problem. Even hard coding the IP address I resolved through Google doesn't seem to work. I'm guessing their sabotage may have backfired and is causing issues beyond their intentional scope?

replies(2): >>kalleb+XH >>jrochk+M23
◧◩◪◨
13. kalleb+XH[view] [source] [discussion] 2023-08-05 14:40:45
>>jeroen+7p
If you use an Apple device and have iCloud Private Relay turned on, one of their providers is Cloudflare and that will cause the same issue.
◧◩◪◨
14. jrochk+M23[view] [source] [discussion] 2023-08-06 13:00:12
>>jeroen+7p
This just helped me realize why I couldn't get to archive.today anymore -- however, for me, both Google DNS (8.8.8.8) and CloudFlare DNS (1.1.1.1) resulted in either infinite captcha loop or timeout.

I had to switch back to my ISP DNS to have connection successful.

I did not realize that choice of DNS resolver could effect access to a website like this. I thought DNS was boring stable technology. The error conditions weren't even DNS failure (which I would also find surprising from Google or Cloudflare), but that server timeout, or weirder infinite captcha loop.

◧◩◪◨⬒⬓
15. alexol+NHA[view] [source] [discussion] 2023-08-16 17:48:33
>>Troubl+X7
Incorrect response here with 9.9.9.10 (unfiltered version of 9.9.9.9) As well as the corresponding Quad9 DOH
[go to top]