zlacker

[parent] [thread] 12 comments
1. Troubl+(OP)[view] [source] 2023-08-05 07:21:56
Change your DNS - you are using CF
replies(2): >>ttctci+L >>stonog+x5
2. ttctci+L[view] [source] 2023-08-05 07:32:24
>>Troubl+(OP)
Are you suggesting the cert problem is DNS related or the new captcha issue?

DNS was ISP, not 1.1.1.1, and I get the same behaviour after switching to 8.8.8.8.

replies(3): >>Troubl+z2 >>dredmo+x4 >>jeroen+fo
◧◩
3. Troubl+z2[view] [source] [discussion] 2023-08-05 07:54:11
>>ttctci+L
>I've had infrequently occurring arcane cert/SSL issues <> Same error page as https://1.1.1.7/ ?

captcha is CF

Related: Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)

HN Discussion (209-comments 2023-08-02) >>36970702

I just snapshot this page for a test : https://archive.is/MUhAP = >>37009598

Edit of formatting for readability.

◧◩
4. dredmo+x4[view] [source] [discussion] 2023-08-05 08:20:48
>>ttctci+L
Who is your ISP's DNS provider?

Do they run their own resolver, or rely on an extant service?

replies(1): >>Troubl+26
5. stonog+x5[view] [source] 2023-08-05 08:32:56
>>Troubl+(OP)
I'm using Quad 9 and getting the same results. Who is the right DNS provider?
replies(1): >>abwizz+ta
◧◩◪
6. Troubl+26[view] [source] [discussion] 2023-08-05 08:39:21
>>dredmo+x4
I do Not use my ISP's DNS!

I'm reticent to disclose my current DNS provider,

given that I am able to access archive.is and many are not at this point of time.

replies(1): >>Troubl+57
◧◩◪◨
7. Troubl+57[view] [source] [discussion] 2023-08-05 08:52:44
>>Troubl+26
I have just checked 8.8.8.8 and they are serving the correct response now. (incorrect earlier)

Edit

I have just checked 9.9.9.9 and they are serving the correct response now. (incorrect earlier)

replies(1): >>alexol+VGA
◧◩
8. abwizz+ta[view] [source] [discussion] 2023-08-05 09:35:53
>>stonog+x5
if you can't trust your isp than either find someone that you can trust (by verification) or run your own resolver.

there was a recent move from the eu to have an eu-centric public resolver which brought up the question if/how the big players address country specific filtering requirements which in turn might have shed some light on the fact that gog/cf didn't care; until now.

replies(1): >>moepst+hd
◧◩◪
9. moepst+hd[view] [source] [discussion] 2023-08-05 10:13:43
>>abwizz+ta
I run Pi-hole with Unbound - set up is easy and rewards are uncensored DNS, ad-blocking etc..

Oh and - given the right adlists - may also prevent infecting your machine/network/... with malware...

Not to speak of clients which may not equipped with on-device adblockers, such as TVs etc...

◧◩
10. jeroen+fo[view] [source] [discussion] 2023-08-05 12:20:24
>>ttctci+L
Archive.* sabotages their DNS records when Cloudflare queries for them. They don't like that Cloudflare doesn't do EDNS forwarding so they broke their service for people using 1.1.1.1.

That said, I have the same problem. Even hard coding the IP address I resolved through Google doesn't seem to work. I'm guessing their sabotage may have backfired and is causing issues beyond their intentional scope?

replies(2): >>kalleb+5H >>jrochk+U13
◧◩◪
11. kalleb+5H[view] [source] [discussion] 2023-08-05 14:40:45
>>jeroen+fo
If you use an Apple device and have iCloud Private Relay turned on, one of their providers is Cloudflare and that will cause the same issue.
◧◩◪
12. jrochk+U13[view] [source] [discussion] 2023-08-06 13:00:12
>>jeroen+fo
This just helped me realize why I couldn't get to archive.today anymore -- however, for me, both Google DNS (8.8.8.8) and CloudFlare DNS (1.1.1.1) resulted in either infinite captcha loop or timeout.

I had to switch back to my ISP DNS to have connection successful.

I did not realize that choice of DNS resolver could effect access to a website like this. I thought DNS was boring stable technology. The error conditions weren't even DNS failure (which I would also find surprising from Google or Cloudflare), but that server timeout, or weirder infinite captcha loop.

◧◩◪◨⬒
13. alexol+VGA[view] [source] [discussion] 2023-08-16 17:48:33
>>Troubl+57
Incorrect response here with 9.9.9.10 (unfiltered version of 9.9.9.9) As well as the corresponding Quad9 DOH
[go to top]