On Mon, Jan 02, 2017 at 07:20:36AM +0100, Jaromil wrote:
> dear Rick,
>
> On Sun, 01 Jan 2017, Rick Moen wrote:
>
> > In skimming through the dnscrypt source code, I see that it's a DNS
> > tool to proxy queries over DNSCrypt protocol (that invokes ldns in
> > the process of doing its work) -- but it is not a recursive
> > nameserver
>
> yes you are right here, dnscrypt being just one more piece for our
> puzzles. on the dnscrypt server proxy at dyne.org we have bind9
> providing answers. now back to your suggestion I guess we should look
> into ways to get dnssec in dowse...
>
>
> > My modest suggestion is that it's in Linux users' interest to not
> > outsource recursive service to anyone at all.

I started using Google's DNS to test what outsiders get to see of my
LAN. It turns out I never need to name my internal machines.

One of these days I'll probably get around to installing my own
recursive DNS server, just to find out how that's done.

It's a mystery to me why most home Windows and Mac systems don't have
their own built in. My daughter ended up with major complications
when after an upgrade her Windows machine insisted on looking for a
DNS server somewhere in the nonroutable 10.x.x.x net. It seems
that's some kind of Windows LAN default and nothing worked any more.

It does seem to be a tradition for dhcp to tell clients what DNS
service to use. Could it be that coffee shops get suspicious about
the use of stray DNS servers and block them?

-- hendrik

>
> its a well concerned suggestion.
>
> what a pity Debian has switched to Google's DNS by default.
>
> I recall this switch was made in conjunction with systemd adoption.
>
> > I do admire NL LABs's ldns
> > (https://www.nlnetlabs.nl/projects/ldns/): It's a very modern,
> > well-done DNS client library, basis for the 'drill' utility (a
> > better replacement for both dig and nslookup).
>
> yes, its a work of love. the code for marshalling linked lists of
> information into binary wire packets is well reusable for other kind
> of projects too.
>
> ciao
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng