Never trust an ISPs DNS servers. Too easy to poison. Yes, Google et. al are also vulnerable, but the attack vector is a lot harder.
...Skeeve *Skeeve Stevens - Founder & Chief Architect - *eintellego Networks Pty Ltd ske...@eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve Cumulus Linux / Open Networking - Cloud - Consulting - Juniper - Cisco - IPv4 Brokering On Mon, Apr 2, 2018 at 10:32 AM, Terry Manderson <te...@terrym.net> wrote: > I saw the blog post and already had some awareness that this was coming, > but there is one question I have for Australian operators. > > How many operators promote services like 1.1.1.1 and 8.8.8.8 to their > customers instead of operating their own recursive DNS infrastructure? > > And if you do, what was the driver and then risk mitigation position taken? > > Cheers, > Terry > -- > Mobile device, don't expect grammar. > > On 2 Apr 2018, at 10:12 am, Andrew Yager <and...@rwts.com.au> wrote: > > Hi All, > > In case you missed it, despite Easter and April Fools day, CloudFlare, in > conjunction APNIC have launched a new public DNS server at 1.1.1.1 and > 1.0.0.1 (IPv4) and 2606:4700:4700::1111 and 2606:4700:4007::1001 (IPv6). > > Details are: > > https://1.1.1.1/ > https://blog.cloudflare.com/announcing-1111/ > https://labs.apnic.net/?p=1127 > > Quick tests have suggested it is quite fast compared with Google's > resolvers (seeing an average of 23ms on queries as opposed to an average of > 700ms) and sensible results on CDN queries. > > While initially a 5 year research project, it does look quite promising > from my 20 minute digging around. > > Happy easter all :) > > Andrew > > _______________________________________________ > AusNOG mailing list > AusNOG@lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > > > _______________________________________________ > AusNOG mailing list > AusNOG@lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > >
_______________________________________________ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog