Hacker Newsnew | past | comments | ask | show | jobs | submit | JdeBP's commentslogin



Already noted in lengthy discussion, in amongst many other ironies, at https://news.ycombinator.com/item?id=45963780 .




Sadly, I can report that this has brought down 2 of the major Mastodon nodes in the United Kingdom.

Happily, the small ones that I also use are still going without anyone apparently even noticing. At least, the subject has yet to reach their local timelines at the time that I write this.

2 of the other major U.K. nodes are still up, too.





Ever since the Verisign coup in 2003, the world has had the idea of "delegation-only" and suchlike filtering on responses from superdomain servers. More recently, query minimization was invented. Both of these can militate against the root content DNS servers doing that.

Better still, one can run one's own private root content DNS server. I've been doing that (in several ways) for a couple of decades. If ICANN decided to blackhole (say) www.microsoft.com. tomorrow, my DNS lookups wouldn't be affected.

To affect them, the aforementioned "court action" would have to target Verisign.


I'm curious: how did you implement your "private root content" DNS server such that it keeps up with (valid -- and how would you know?) updates made by the TLD registries via IANA?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: