:: Re: [Dng] Another reason of why I a…
Góra strony
Delete this message
Reply to this message
Autor: T.J. Duchene
Data:  
Dla: dng
Temat: Re: [Dng] Another reason of why I am considering Devuan


> -----Original Message-----
> From: Martin Steigerwald [mailto:martin@lichtvoll.de]
> Sent: Friday, April 3, 2015 3:36 AM
> To: dng@???
> Subject: Re: [Dng] Another reason of why I am considering Devuan
>
> Please do not Cc me personally on your reply.

[T.J. ] Apologies. "Reply to all" defaults.
>


> Having a default DNS thus means that the data is *centralized*.

[T.J. ] In caching DNS, sure. If it bothers you, use a list and randomize.
It would be much simpler to setup your own server.
>
> If everyone uses their own providers DNS, it is spread around.
>

[T.J. ] Not really. A lot of providers do not run actual nameservers, just
caching ones - but that is not material to the discussion.

> I think this makes a huge difference. I think Google is dangerous, cause

they
> are too big. They collect too much data.
>

Perhaps. But if that is a concern, then best not to use anything Google,
and not visit any page that uses Google Adsense. Best thing to do would be
to setup your own nameserver and black-hole any traffic to or from Google's
subnets in your router. Otherwise, you will be aggregating data whether you
like it or not.

> Just cause someone doesn´t like google DNS as a default doesn´t mean he or
> she is paranoid. So please stay away from personal attacks.


[T.J. ] All I said what that "worrying about providers logging DNS traffic
is a fairly pointless time waster." That was just a frank observation, not a
personal attack. I didn't intend an "attack" on Nuno or anyone else,
Martin. From a traffic standpoint, I would be far more concerned with
someone logging your HTTP packets rather than DNS. HTTP connections are a
bit more direct, and usually encrypted. Usually your connection is only
distributed across a limited number of servers hosting a particular website.
By comparison, DNS is far, far more distributed and not encrypted. Your DNS
calls might require requests all the way from your ISP all the way across
Internet to an authorative nameserver, with a few hopes in-between. There
is not much you can do about it: that is the way the system works.

Have a great night!