From 21b811ced13fe53f72b43b58f234b22080346ee2 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Wed, 7 Apr 2021 12:33:38 +0200 Subject: [PATCH] Quad9 is unreliable over IPv6 --- v1/dnscrypt-resolvers.csv | 2 -- v1/dnscrypt-resolvers.csv.minisig | 6 +++--- v2/public-resolvers.md | 18 ------------------ v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 18 ------------------ v3/public-resolvers.md.minisig | 6 +++--- 6 files changed, 9 insertions(+), 47 deletions(-) diff --git a/v1/dnscrypt-resolvers.csv b/v1/dnscrypt-resolvers.csv index 7272dfa1..b927b74a 100644 --- a/v1/dnscrypt-resolvers.csv +++ b/v1/dnscrypt-resolvers.csv @@ -130,8 +130,6 @@ publicarray-au2,publicarray-au2,DNSSEC • OpenNIC • Non-logging • Uncensore pwoss.org-dnscrypt,pwoss.org-dnscrypt,"No filter | No logs | DNSSEC | Nuremberg, Germany (netcup) | Maintained by https://pwoss.org/ (Dan)",,,,2,yes,yes,no,45.142.176.170:4434,2.dnscrypt-cert.pwoss.org,645F:054E:4B85:545C:3A60:FE71:F327:5E6E:74DB:F0E3:4FED:38BA:3F42:B544:4CA1:5078, quad9-dnscrypt-ip4-filter-pri,quad9-dnscrypt-ip4-filter-pri,Quad9 (anycast) dnssec/no-log/filter 9.9.9.9 / 149.112.112.9,,,,2,yes,yes,no,9.9.9.9:8443,2.dnscrypt-cert.quad9.net,67C8:47B8:C875:8CD1:2024:5543:BE75:6746:DF34:DF1D:84C0:0B8C:4703:68DF:821D:863E, quad9-dnscrypt-ip4-nofilter-pri,quad9-dnscrypt-ip4-nofilter-pri,Quad9 (anycast) no-dnssec/no-log/no-filter 9.9.9.10 / 149.112.112.10,,,,2,no,yes,no,9.9.9.10:8443,2.dnscrypt-cert.quad9.net,67C8:47B8:C875:8CD1:2024:5543:BE75:6746:DF34:DF1D:84C0:0B8C:4703:68DF:821D:863E, -quad9-dnscrypt-ip6-filter-pri,quad9-dnscrypt-ip6-filter-pri,Quad9 (anycast) dnssec/no-log/filter 2620:fe::fe:9 / 2620:fe::9,,,,2,yes,yes,no,[2620:fe::fe:9]:8443,2.dnscrypt-cert.quad9.net,67C8:47B8:C875:8CD1:2024:5543:BE75:6746:DF34:DF1D:84C0:0B8C:4703:68DF:821D:863E, -quad9-dnscrypt-ip6-nofilter-pri,quad9-dnscrypt-ip6-nofilter-pri,Quad9 (anycast) no-dnssec/no-log/no-filter 2620:fe::10 / 2620:fe::fe:10,,,,2,no,yes,no,[2620:fe::10]:8443,2.dnscrypt-cert.quad9.net,67C8:47B8:C875:8CD1:2024:5543:BE75:6746:DF34:DF1D:84C0:0B8C:4703:68DF:821D:863E, safesurfer,safesurfer,"Family safety focused blocklist for over 2 million adult sites, as well as phishing and malware and more.",,,,2,yes,yes,no,104.155.237.225,2.dnscrypt-cert.safesurfer.co.nz,2720:7FD5:1204:E836:7B48:3400:5DF9:FFD1:D30B:BE2A:9C33:639E:6EDB:F8AE:D91D:40D8, scaleway-ams,scaleway-ams,DNSSEC/Non-logged/Uncensored in Amsterdam - DEV1-S instance donated by Scaleway.com,,,,2,yes,yes,no,51.15.122.250,2.dnscrypt-cert.scaleway-ams,E90D:D97D:AA5C:6C78:221C:A2C5:ED01:6896:2D13:CB55:6CCF:7457:B354:546F:152B:C190, scaleway-ams-ipv6,scaleway-ams-ipv6,DNSSEC/Non-logged/Uncensored in Amsterdam - IPv6 only - DEV1-S instance donated by Scaleway.com,,,,2,yes,yes,no,[2001:bc8:1820:50d::1],2.dnscrypt-cert.scaleway-ams,E90D:D97D:AA5C:6C78:221C:A2C5:ED01:6896:2D13:CB55:6CCF:7457:B354:546F:152B:C190, diff --git a/v1/dnscrypt-resolvers.csv.minisig b/v1/dnscrypt-resolvers.csv.minisig index f88d47ae..dbbad0e7 100644 --- a/v1/dnscrypt-resolvers.csv.minisig +++ b/v1/dnscrypt-resolvers.csv.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i542yJJYXz2lO/mV1VSmCuTlJCwxgTah1Pjl/3Psp8H9OhKJ/hC/j9l7KW0aNXkF4/Hn45aWkpkhoYbSYYgOMAww= -trusted comment: timestamp:1617791568 file:dnscrypt-resolvers.csv -UKCsk6eSqaCMhmLfag1i++n9LPIYP4rDqSKsK4+AjceXFyvtxrOd4WA5gMtPdkEEQ1+N32YlOXS5Mt8nOYUGCw== +RWQf6LRCGA9i51N7+YXYk4Kd44Mt8V/Kfcg8A+dKyheYyiNGXm3dAetSVfBY0e29fT4uiu9TN9WTJNuDb3DXxXwYGcNwAZpQ+Ao= +trusted comment: timestamp:1617791618 file:dnscrypt-resolvers.csv +NTxhXkuVnQw3iruH3Mq4zk/pJtnyWhdhIXP1KVDJW1xuweVp5LfqTQQj5PtTxrBn/yZjWhQ48OotF0AeYUY4Aw== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index e9d57939..c6c95ba8 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -1924,24 +1924,6 @@ Quad9 (anycast) no-dnssec/no-log/no-filter 9.9.9.10 / 149.112.112.10 sdns://AQYAAAAAAAAADTkuOS45LjEwOjg0NDMgZ8hHuMh1jNEgJFVDvnVnRt803x2EwAuMRwNo34Idhj4ZMi5kbnNjcnlwdC1jZXJ0LnF1YWQ5Lm5ldA -## quad9-dnscrypt-ip6-filter-pri - -Quad9 (anycast) dnssec/no-log/filter 2620:fe::fe:9 / 2620:fe::9 - -Warning: this server is incompatible with DNS anonymization. - -sdns://AQMAAAAAAAAAFFsyNjIwOmZlOjpmZTo5XTo4NDQzIGfIR7jIdYzRICRVQ751Z0bfNN8dhMALjEcDaN-CHYY-GTIuZG5zY3J5cHQtY2VydC5xdWFkOS5uZXQ - - -## quad9-dnscrypt-ip6-nofilter-pri - -Quad9 (anycast) no-dnssec/no-log/no-filter 2620:fe::10 / 2620:fe::fe:10 - -Warning: this server is incompatible with DNS anonymization. - -sdns://AQYAAAAAAAAAElsyNjIwOmZlOjoxMF06ODQ0MyBnyEe4yHWM0SAkVUO-dWdG3zTfHYTAC4xHA2jfgh2GPhkyLmRuc2NyeXB0LWNlcnQucXVhZDkubmV0 - - ## quad9-doh-ip4-filter-pri Quad9 (anycast) dnssec/no-log/filter 9.9.9.9 / 149.112.112.9 diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 0c0589a5..613d0fd5 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i55Ly/aHwGbQQaZdROa1PQnOS4eppAjU2p87VVGTCL0q4METeCYwM3/l9MwG/c8/ogBpQMUMZynMR+BTQ2R2D8Ak= -trusted comment: timestamp:1617791568 file:public-resolvers.md -u4i/OIgDIMUNdsCI8LsgAP6ckdUgmnB3CcSfrt7Akf5HijsyMn7Dq5jgcUCoDiyWTm1JAujaLW68lBgLn+1MAg== +RWQf6LRCGA9i577OUcIheFB7nF5Cp0uNCTUafsbgAoN2NXA0Z39HajrKmIhQVfZ1FhYHgEYQmzsYFzn2exoovzxV3DNvZ+QrJgA= +trusted comment: timestamp:1617791618 file:public-resolvers.md +rtPsyrOMBO3U7yd8NW7GigMqF/cJcDl5b26jdxNJvE0+huEY13OIZMRTX2tqBaeEiLc2Nn26NpaS28XtajjXCQ== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index c3f7f7ef..dfa4df49 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -1941,24 +1941,6 @@ sdns://AQYAAAAAAAAADTkuOS45LjEwOjg0NDMgZ8hHuMh1jNEgJFVDvnVnRt803x2EwAuMRwNo34Idh sdns://AQYAAAAAAAAAEzE0OS4xMTIuMTEyLjEwOjg0NDMgZ8hHuMh1jNEgJFVDvnVnRt803x2EwAuMRwNo34Idhj4ZMi5kbnNjcnlwdC1jZXJ0LnF1YWQ5Lm5ldA -## quad9-dnscrypt-ip6-filter-pri - -Quad9 (anycast) dnssec/no-log/filter 2620:fe::fe:9 / 2620:fe::9 - -Warning: this server is incompatible with DNS anonymization. - -sdns://AQMAAAAAAAAAFFsyNjIwOmZlOjpmZTo5XTo4NDQzIGfIR7jIdYzRICRVQ751Z0bfNN8dhMALjEcDaN-CHYY-GTIuZG5zY3J5cHQtY2VydC5xdWFkOS5uZXQ - - -## quad9-dnscrypt-ip6-nofilter-pri - -Quad9 (anycast) no-dnssec/no-log/no-filter 2620:fe::10 / 2620:fe::fe:10 - -Warning: this server is incompatible with DNS anonymization. - -sdns://AQYAAAAAAAAAElsyNjIwOmZlOjoxMF06ODQ0MyBnyEe4yHWM0SAkVUO-dWdG3zTfHYTAC4xHA2jfgh2GPhkyLmRuc2NyeXB0LWNlcnQucXVhZDkubmV0 - - ## quad9-doh-ip4-filter-pri Quad9 (anycast) dnssec/no-log/filter 9.9.9.9 / 149.112.112.9 diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 7f448aab..fce5cd55 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i54jG5SEGOe4G6guTSvij9J3OkRlQS4ysx+4mb2kN853guo9cU8nJcSU011EhBzvC90yYw6gB7uKxwVAP8kL1RwE= -trusted comment: timestamp:1617791568 file:public-resolvers.md -IYboilYeTKNe3Q7/NDc3b/1U2sS+9F0Pz+ieYAUE9aT6+JfpI7y5zUBiT/qPQ/p7SuddCy4hg5Rxs+IeqM+oBQ== +RWQf6LRCGA9i50s/UsFFoPgCmc0WUtGn7RdDu1ESLpX5pp4MUGymcOc2R6+NY4J5GG7sUKldjc5DkhR2CasnT9P4xzXjz6vllQA= +trusted comment: timestamp:1617791618 file:public-resolvers.md +C9sIqfaNVCOk5KSwfqwpaJX3G3hzgEWT0ubM1hLegmx97o0XzbIoSsey0vbLiNfEiamBSxwxyuNNaYm2gxD8Bw==