Quad9 Enables DNS over HTTP/3 and DNS over QUIC

(quad9.net)

53 points | by itchingsphynx 19 hours ago

6 comments

  • b3lvedere 12 hours ago
    I used the Quad9 resolvers in the past, but i've been using the DNS4EU for a while now [1]

    [1] https://joindns4.eu/

    • crote 11 hours ago
      What made you switch?
      • b3lvedere 5 hours ago
        It seems faster for me and it has multiple choices of protection.
  • ZeroCool2u 6 hours ago
    Does quad9 have a resolver that includes ad blocking?
    • itchingsphynx 5 hours ago
      "Does Quad9 offer content filtering? No. Quad9 has no plans to provide content filtering. Quad9 is dedicated solely to internet security and the blocking of malicious domains, such as phishing, malware, and exploit kits." https://quad9.net/support/faq/#dns_crypt
      • justinclift 4 hours ago
        That's a shame, because ad blocking would seem to fit in:

        > blocking of malicious domains

  • itchingsphynx 19 hours ago
    Quad9 has enabled DNS over HTTP/3 (DoH3) and DNS over QUIC (DoQ) across its global resolver network.
  • MORPHOICES 13 hours ago
    [dead]
  • ape4 13 hours ago
    So many more layers than the original simple DNS protocol.
    • crote 10 hours ago
      "Simple" doesn't always mean "better". A car without seatbelts is less complicated than one with, but it definitely doesn't make it a better car.

      Similarly, The original DNS protocol doesn't have any form of verification: it is is trivially easy for a MitM attacker to alter the responses - or even for a non-MitM one to send spoofed responses "in the blind". It also doesn't have any form of confidentiality: it is trivially easy for a MitM attacker to log all the requests you make, which essentially means your entire browser history.

      It takes an awful lot of hacking to turn classic DNS into something even remotely representing a mature and well-designed protocol. By the time you are done bolting on all the other stuff it really isn't all that simple anymore.

    • pixl97 12 hours ago
      Too bad ISPs are real dicks and capture all your DNS requests for tracking and resale.
    • UqWBcuFx6NV4r 13 hours ago
      OK. It is still there, and you are welcome to use it.