From 818c60b37df253d265e6dc08874bf322dafcaf2c Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:41:51 +0200 Subject: [PATCH 01/14] decloudus-nogoogle-tstipv6 doesn't support DNSSEC --- v1/dnscrypt-resolvers.csv | 2 +- v1/dnscrypt-resolvers.csv.minisig | 6 +++--- v2/public-resolvers.md | 4 ++-- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 4 ++-- v3/public-resolvers.md.minisig | 6 +++--- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/v1/dnscrypt-resolvers.csv b/v1/dnscrypt-resolvers.csv index 3c8be089..b0240a12 100644 --- a/v1/dnscrypt-resolvers.csv +++ b/v1/dnscrypt-resolvers.csv @@ -77,7 +77,7 @@ cs-tx3,cs-tx3,"US - Dallas, TX 3 DNSCrypt server provided by https://cryptostorm cs-vancouver,cs-vancouver,"Vancouver, Canada DNSCrypt server provided by https://cryptostorm.is/",,,,2,no,yes,no,196.240.79.163,2.dnscrypt-cert.cryptostorm.is,3133:72AD:5956:32C2:416B:872F:098F:851B:DDB9:6528:4C6C:BE9A:4F19:0964:30DB:A95A, dct-nl,dct-nl,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Dronten, Netherlands.",,,,2,yes,yes,no,5.255.105.24:8443,2.dnscrypt-cert.dct-nl,6603:8F1A:81BA:8760:E755:E206:CF0E:DF5F:F593:1301:0CD9:7F39:E6D0:D701:6BC7:BF41, dct-ru,dct-ru,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Moscow, Russia.",,,,2,yes,yes,no,185.22.154.19,2.dnscrypt-cert.dct-ru,2C07:883D:5CFB:6B9A:B3E2:E534:5BDF:145F:1B4D:3C36:3018:D7EF:C311:8133:6A59:493D, -decloudus-nogoogle-tstipv6,decloudus-nogoogle-tstipv6,"Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. Supports DNSSEC. No Logs. For IPv6.",,,,2,yes,yes,no,[2a01:4f8:13a:250b::30]:9443,2.dnscrypt-cert.DeCloudUs-test,4D44:DE13:695C:A791:CC24:5406:D206:B0AF:AF85:F773:70B2:833F:F854:351C:4618:6163, +decloudus-nogoogle-tstipv6,decloudus-nogoogle-tstipv6,"Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. No Logs. For IPv6.",,,,2,no,yes,no,[2a01:4f8:13a:250b::30]:9443,2.dnscrypt-cert.DeCloudUs-test,4D44:DE13:695C:A791:CC24:5406:D206:B0AF:AF85:F773:70B2:833F:F854:351C:4618:6163, deffer-dns.au,deffer-dns.au,DNSSEC/Non-logged/Uncensored in Sydney (AWS).,,,,2,yes,yes,no,52.65.235.129,2.dnscrypt-cert.deffer-dns.au,E50D:3444:30C1:930C:777D:469A:D3F7:AD8F:3E22:1F79:4B04:EAAC:83DE:5B60:3995:D3B3, dnscry.pt-adelaide-ipv4,dnscry.pt-adelaide-ipv4,"DNSCry.pt Adelaide - DNSCrypt, no filter, no logs, DNSSEC support (IPv4 server)",,,,2,yes,yes,no,23.140.248.100,2.dnscrypt-cert.dnscry.pt,56B7:CC14:0DB3:98E3:1084:87B2:4A58:ED64:8D2B:8B0B:8FFA:AB6C:588B:939B:5204:DD6E, dnscry.pt-adelaide-ipv6,dnscry.pt-adelaide-ipv6,"DNSCry.pt Adelaide - DNSCrypt, no filter, no logs, DNSSEC support (IPv6 server)",,,,2,yes,yes,no,[2602:fba1:a00::100:1],2.dnscrypt-cert.dnscry.pt,56B7:CC14:0DB3:98E3:1084:87B2:4A58:ED64:8D2B:8B0B:8FFA:AB6C:588B:939B:5204:DD6E, diff --git a/v1/dnscrypt-resolvers.csv.minisig b/v1/dnscrypt-resolvers.csv.minisig index 8ed625bf..3b60d32f 100644 --- a/v1/dnscrypt-resolvers.csv.minisig +++ b/v1/dnscrypt-resolvers.csv.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i52k7AfQmayLkQrqJnOeBVJDaI12P7tacmBv14hQbuQhutJmrOtfz0ddcPeayVSk8xPM7y1Eh0vUIIbaONmZumAo= -trusted comment: timestamp:1715611472 file:dnscrypt-resolvers.csv -3qZXgLfVVjWT9DdtD/0Gj9wihoO8KeFQ8rxUbLYjNwhDxrRNOdCYftdSYvhXLoOSbvKto607RNlZdcOSXlc9DQ== +RWQf6LRCGA9i5578GYH3p6BmzJw5QhEOGmedw6h8MRpWWU8YNOcRMBgpOdlUc8xIsE+xL1SIaqlk2Utns4RnziOlStjH8J6g7wY= +trusted comment: timestamp:1716118911 file:dnscrypt-resolvers.csv +3KQasTYX1e1EZjI8ABHdp1gtXYX5A44ebPLJlUOLFA1m4jmtnQRgGjHcpLJtl2uqGmL9DYG9nqsVN3OErDgmAQ== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index f0bf5e1b..fec5cee1 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -925,11 +925,11 @@ sdns://AQcAAAAAAAAADTE4NS4yMi4xNTQuMTkgLAeIPVz7a5qz4uU0W98UXxtNPDYwGNfvwxGBM2pZS ## decloudus-nogoogle-tstipv6 -Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. Supports DNSSEC. No Logs. For IPv6. +Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. No Logs. For IPv6. Contributed by: https://decloudus.com -sdns://AQMAAAAAAAAAHFsyYTAxOjRmODoxM2E6MjUwYjo6MzBdOjk0NDMgTUTeE2lcp5HMJFQG0gawr6-F93NwsoM_-FQ1HEYYYWMeMi5kbnNjcnlwdC1jZXJ0LkRlQ2xvdWRVcy10ZXN0 +sdns://AQIAAAAAAAAAHFsyYTAxOjRmODoxM2E6MjUwYjo6MzBdOjk0NDMgTUTeE2lcp5HMJFQG0gawr6-F93NwsoM_-FQ1HEYYYWMeMi5kbnNjcnlwdC1jZXJ0LkRlQ2xvdWRVcy10ZXN0 ## deffer-dns.au diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index c1064d26..9dffa016 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i53aibMbBRkHV6XCacmak/U1dm3xQ/Gt26BJ/H8ordpr7JDTVUhuGEoZHdMxAiRoeJRtxFXxKMB/0Cj8kvZHLXQE= -trusted comment: timestamp:1715762470 file:public-resolvers.md -OcDOwzZhKD1TH63FmRGV3zoRSeQ6wlK7mjHfk4Y3IO8Eewo1lpZRbSn9MT/tj+9ALwCHevulsnPZbip+q5PZBg== +RWQf6LRCGA9i5xDrCHuoyal5DZNEYnhVpDn/Lq2/kZWsAbSEh8N2FSE6nBSJ0fClZGWecmpaVcdf0unw4xguUE4dAYt74SFwcAM= +trusted comment: timestamp:1716118911 file:public-resolvers.md +bY/1bRPlSbgVZV6Y50V6pNtoG3XlrKJouGlu6F4DsEr0ENm2zyPE9xl6055IwQaW9wGXXJ9ESXoVeAWBu8u4Ag== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 993463f3..5c6e5675 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -947,11 +947,11 @@ sdns://AQcAAAAAAAAADTE4NS4yMi4xNTQuMTkgLAeIPVz7a5qz4uU0W98UXxtNPDYwGNfvwxGBM2pZS ## decloudus-nogoogle-tstipv6 -Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. Supports DNSSEC. No Logs. For IPv6. +Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. No Logs. For IPv6. Contributed by: https://decloudus.com -sdns://AQMAAAAAAAAAHFsyYTAxOjRmODoxM2E6MjUwYjo6MzBdOjk0NDMgTUTeE2lcp5HMJFQG0gawr6-F93NwsoM_-FQ1HEYYYWMeMi5kbnNjcnlwdC1jZXJ0LkRlQ2xvdWRVcy10ZXN0 +sdns://AQIAAAAAAAAAHFsyYTAxOjRmODoxM2E6MjUwYjo6MzBdOjk0NDMgTUTeE2lcp5HMJFQG0gawr6-F93NwsoM_-FQ1HEYYYWMeMi5kbnNjcnlwdC1jZXJ0LkRlQ2xvdWRVcy10ZXN0 ## deffer-dns.au diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index a067c33d..efaf7f25 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i58vnrUco9fsIMHDXlbx/g94VkRrfD24mlTiVmJotxf0PoVXRs56CiQRF8trA7h7WkYLffihDp8oE7CV+Hu7P8Q0= -trusted comment: timestamp:1715762470 file:public-resolvers.md -yk7XCZE92FYBRjyhrPlzkZ3D+jtXMEVQuwg0HZaHLPoIIr98AEMnBFebIQtLYXUHMyhZWDYS8PjJ2wdjGTkcCw== +RWQf6LRCGA9i5xz8WTnawG7NC+GOyJBRRrKCiFQ/RT3D4pCIRI8akWLgFBG/FnRKAKsiewLKYsZnIsHypLLzM8ShYcXgNnxMpwY= +trusted comment: timestamp:1716118911 file:public-resolvers.md +3sGZgFCSRt0bDdqPqD2PoaqDbMkThdnfuDp62tGc9XWvCRJqW6/Wopj2V8XB1wbRW2qrjksgmbl4Y3qEK8QpDQ== From e37c5c21e01e74dc192bb49b5742b1c1ccd5b179 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:44:38 +0200 Subject: [PATCH 02/14] Update cert for DNSPOD --- v2/public-resolvers.md | 2 +- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 2 +- v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index fec5cee1..c70fd550 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -2493,7 +2493,7 @@ Warning: GFW filtering rules are applied by that resolver. Homepage: https://dnspod.cn/ -sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgj0tzmXxLBOpQ_q-pGiQx1CvKa1TCO8-du_VyJJOU4QwHZG9oLnB1YgovZG5zLXF1ZXJ5 +sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgMpntrxEM8lYjfMIIJmos1kY3lXH4CrBeFe5nNShLotIHZG9oLnB1YgovZG5zLXF1ZXJ5 ## dnswarden-adult-doh diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 9dffa016..542c17cb 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5xDrCHuoyal5DZNEYnhVpDn/Lq2/kZWsAbSEh8N2FSE6nBSJ0fClZGWecmpaVcdf0unw4xguUE4dAYt74SFwcAM= -trusted comment: timestamp:1716118911 file:public-resolvers.md -bY/1bRPlSbgVZV6Y50V6pNtoG3XlrKJouGlu6F4DsEr0ENm2zyPE9xl6055IwQaW9wGXXJ9ESXoVeAWBu8u4Ag== +RWQf6LRCGA9i587UTNvuIhOqNTZdTnILCH6sO3DQBBkZvkqqMuYtT9mvEm+2cuSJOF4MCHDpU4ShOP+x6I05eVu8C95/CdX2JgQ= +trusted comment: timestamp:1716119078 file:public-resolvers.md ++CD096xBJazx+rW2oJXR7yPjiqOyC31S8sfeB2N7Aq6WgZ7feWx6l7DjplYfuZb6RRAHmotuBJdUHsZotFLEAQ== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 5c6e5675..5a21cb29 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -2518,7 +2518,7 @@ Warning: GFW filtering rules are applied by that resolver. Homepage: https://dnspod.cn/ -sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgj0tzmXxLBOpQ_q-pGiQx1CvKa1TCO8-du_VyJJOU4QwHZG9oLnB1YgovZG5zLXF1ZXJ5 +sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgMpntrxEM8lYjfMIIJmos1kY3lXH4CrBeFe5nNShLotIHZG9oLnB1YgovZG5zLXF1ZXJ5 ## dnswarden-adult-doh diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index efaf7f25..8b024a1f 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5xz8WTnawG7NC+GOyJBRRrKCiFQ/RT3D4pCIRI8akWLgFBG/FnRKAKsiewLKYsZnIsHypLLzM8ShYcXgNnxMpwY= -trusted comment: timestamp:1716118911 file:public-resolvers.md -3sGZgFCSRt0bDdqPqD2PoaqDbMkThdnfuDp62tGc9XWvCRJqW6/Wopj2V8XB1wbRW2qrjksgmbl4Y3qEK8QpDQ== +RWQf6LRCGA9i55zUuefAydNCeeFjg/13bYu9RGl4IGThB+EVGXW9eWTfoq318kepfGllWM2vuhNfxReYJXksRJsYJOEP0TqVYA8= +trusted comment: timestamp:1716119078 file:public-resolvers.md +tjNiu7icm19ytih/BiN9ALwibvBJfNFfQf7TD58/LBCeAcisPL8RN0ttvezM/egncKBi8xKm5HeNCyUcPwzeBQ== From d9cbeeb99ee54a46caf4ac14a470fa9822aad29b Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:47:05 +0200 Subject: [PATCH 03/14] dnswarden-adult-doh doesn't support DNSSEC --- v2/parental-control.md | 2 +- v2/parental-control.md.minisig | 6 +++--- v2/public-resolvers.md | 2 +- v2/public-resolvers.md.minisig | 6 +++--- v3/parental-control.md | 2 +- v3/parental-control.md.minisig | 6 +++--- v3/public-resolvers.md | 2 +- v3/public-resolvers.md.minisig | 6 +++--- 8 files changed, 16 insertions(+), 16 deletions(-) diff --git a/v2/parental-control.md b/v2/parental-control.md index 7201d636..4ca9d370 100644 --- a/v2/parental-control.md +++ b/v2/parental-control.md @@ -204,7 +204,7 @@ sdns://AQMAAAAAAAAAF1syYTAxOjRmODoxYzE3OjRkZjg6OjFdIBMl4s4AFc1JhxIkiipHn-JRjPztj Blocks adult content and enforces safe search on major search engines. For further customization look here: https://dnswarden.com/customfilter.html -sdns://AgMAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI +sdns://AgIAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI ## doh-cleanbrowsing-adult diff --git a/v2/parental-control.md.minisig b/v2/parental-control.md.minisig index 5d6f522c..01b5748d 100644 --- a/v2/parental-control.md.minisig +++ b/v2/parental-control.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5zmEgd20hdy1zfcNhOiQGeBWL37nKqg/32feNPuCIV/dGZkBtJwxGdHYZBw2nuRDC/wjtH9CJtn6lWAkQq4HHgs= -trusted comment: timestamp:1715077463 file:parental-control.md -6HSpS9Kx7KLDCz3a661BUxQFrtcuDn5e+JD6YEECb+pMD+bgIpYMC+HC3ESjGf3cxvIcHXoyUHnQ7+wQ/+jSBA== +RWQf6LRCGA9i5z2QS6q8ClQesvhV/LluejuVBgnvEnN0061JDkS1BYojveQHBM3KFpH7YulGXjf7i/BJ+GQvI314DFtEvVw10Qw= +trusted comment: timestamp:1716119220 file:parental-control.md +qOAoB2i45awtw07YovF4Ii/cBInOaEbKAE82XUNHpMXOxyZiGYw6uu5M5Ah8yIAALcGlb94BAIij2nIsoOr+Cw== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index c70fd550..8b7af79c 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -2501,7 +2501,7 @@ sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgMpntrxEM8lYjfMIIJmos1kY3lXH4CrBeFe5nNShLotIHZ Blocks adult content and enforces safe search on major search engines. For further customization look here: https://dnswarden.com/customfilter.html -sdns://AgMAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI +sdns://AgIAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI ## dnswarden-uncensor-dc-swiss diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 542c17cb..538200b9 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i587UTNvuIhOqNTZdTnILCH6sO3DQBBkZvkqqMuYtT9mvEm+2cuSJOF4MCHDpU4ShOP+x6I05eVu8C95/CdX2JgQ= -trusted comment: timestamp:1716119078 file:public-resolvers.md -+CD096xBJazx+rW2oJXR7yPjiqOyC31S8sfeB2N7Aq6WgZ7feWx6l7DjplYfuZb6RRAHmotuBJdUHsZotFLEAQ== +RWQf6LRCGA9i5wvznDD5ooODfvGdD6KcOHLSVJWdTgo9yzSjnx5cmv5lgrBDcjutiH0pECoyhPdlSXMQg2vodDP977ZNrJ9mTAM= +trusted comment: timestamp:1716119216 file:public-resolvers.md +HQfQacqwG+Ol2fjCgMDF5VdWbdg1GSf8YTHUUjH/2ZX/SgomdcFssiOXjmT2QtEqLkW9ulpM1wElaJgbZ/9GCw== diff --git a/v3/parental-control.md b/v3/parental-control.md index 04e24efc..23b12771 100644 --- a/v3/parental-control.md +++ b/v3/parental-control.md @@ -215,7 +215,7 @@ sdns://AQMAAAAAAAAAF1syYTAxOjRmODoxYzE3OjRkZjg6OjFdIBMl4s4AFc1JhxIkiipHn-JRjPztj Blocks adult content and enforces safe search on major search engines. For further customization look here: https://dnswarden.com/customfilter.html -sdns://AgMAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI +sdns://AgIAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI ## doh-cleanbrowsing-adult diff --git a/v3/parental-control.md.minisig b/v3/parental-control.md.minisig index 9312a1d8..637dd2b9 100644 --- a/v3/parental-control.md.minisig +++ b/v3/parental-control.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i54p8dwXk1YaZGvrG6WfSdvPhqbM/rQ8/KaDju7LTniSy7+YGHx1TBw29Gx/tD9Tw/tAu/BYjmgd+qPVbIDebSAo= -trusted comment: timestamp:1715077463 file:parental-control.md -IzjQjq89i8NlzeLgI/izpBbJpkTV7j6C40jFoBfvvW96kFo/pqG2zI9vNiPNpUrwXzCShj0uUoEXhyYWgWTMDg== +RWQf6LRCGA9i5zLmc4r7S+H1gS25u7EPF3g4mKrlUYGMDB4hMXZsyvi3YqCEej4gd3R50moNe86HEvmUm+xbObx1y9N5iMOeDAk= +trusted comment: timestamp:1716119220 file:parental-control.md +R3+yPM1v0jCk1zPLG1f+LCDObNrxVfv78PZdCpE3a6XP8o+gKCyWv7HpSbAnh8s3S1prJW2cOHBnUb5D1nUSDw== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 5a21cb29..846a26c6 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -2526,7 +2526,7 @@ sdns://AgAAAAAAAAAACjEuMTIuMTIuMTIgMpntrxEM8lYjfMIIJmos1kY3lXH4CrBeFe5nNShLotIHZ Blocks adult content and enforces safe search on major search engines. For further customization look here: https://dnswarden.com/customfilter.html -sdns://AgMAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI +sdns://AgIAAAAAAAAAAKARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFkbnMuZG5zd2FyZGVuLmNvbQwvYWR1bHRmaWx0ZXI ## dnswarden-uncensor-dc-swiss diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 8b024a1f..48936290 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i55zUuefAydNCeeFjg/13bYu9RGl4IGThB+EVGXW9eWTfoq318kepfGllWM2vuhNfxReYJXksRJsYJOEP0TqVYA8= -trusted comment: timestamp:1716119078 file:public-resolvers.md -tjNiu7icm19ytih/BiN9ALwibvBJfNFfQf7TD58/LBCeAcisPL8RN0ttvezM/egncKBi8xKm5HeNCyUcPwzeBQ== +RWQf6LRCGA9i5xzMiT8tVoAVByfCHRJ8nKjGA73gIP+rKs3pBK4ba2UgHguL7L3yi1MQ3KaDUcM6+osPJBEix+0JrmgCvbTuPAU= +trusted comment: timestamp:1716119216 file:public-resolvers.md +60483QiYEzwd82N1UZFLSXCesP3JEz0/+IzCQdCabI3XcgZkn9P9VJEp3NYDvbH+q3OzrXQUfbUD3poLG49iAA== From b453693656bee681b08ad31e6d34bc10903d05a9 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:50:49 +0200 Subject: [PATCH 04/14] qihoo360 doesn't support DNSSEC --- v2/public-resolvers.md | 4 ++-- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 4 ++-- v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 8b7af79c..8221faf0 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -3101,11 +3101,11 @@ sdns://AQcAAAAAAAAAEzE2NC42OC4xMjEuMTYyOjQ0NDMgHtKNfXpUMzPyLnXK8DauHpWm1Rqhz7Lqw ## qihoo360-doh -DoH server runned by Qihoo 360, has logs, supports DNSSEC. GFW filtering rules are applied. +DoH server runned by Qihoo 360. Has logs. GFW filtering rules are applied. Homepage: https://sdns.360.net/ -sdns://AgEAAAAAAAAAACBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTApkb2guMzYwLmNuCi9kbnMtcXVlcnk +sdns://AgAAAAAAAAAAACBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTApkb2guMzYwLmNuCi9kbnMtcXVlcnk ## quad101 diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 538200b9..ad89c895 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5wvznDD5ooODfvGdD6KcOHLSVJWdTgo9yzSjnx5cmv5lgrBDcjutiH0pECoyhPdlSXMQg2vodDP977ZNrJ9mTAM= -trusted comment: timestamp:1716119216 file:public-resolvers.md -HQfQacqwG+Ol2fjCgMDF5VdWbdg1GSf8YTHUUjH/2ZX/SgomdcFssiOXjmT2QtEqLkW9ulpM1wElaJgbZ/9GCw== +RWQf6LRCGA9i50wpJ2IYEynB1HmN98qbZ6lDh7lrc4QfED7jo6Iz5IkgSisSRZVFdFbnVhFITMH73vVu4JTEE9BGmdYsBEzsBQY= +trusted comment: timestamp:1716119449 file:public-resolvers.md +SZ99xvYxUvSAFeAvo3xphuKBp265d6tSK/PKixZsqSA7kTlwdfjwmQhLr+J3GKBSdgSrGeWYX1RrSmmBmIuyBw== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 846a26c6..4266629c 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3136,11 +3136,11 @@ sdns://AQcAAAAAAAAAEzE2NC42OC4xMjEuMTYyOjQ0NDMgHtKNfXpUMzPyLnXK8DauHpWm1Rqhz7Lqw ## qihoo360-doh -DoH server runned by Qihoo 360, has logs, supports DNSSEC. GFW filtering rules are applied. +DoH server runned by Qihoo 360. Has logs. GFW filtering rules are applied. Homepage: https://sdns.360.net/ -sdns://AgEAAAAAAAAAACBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTApkb2guMzYwLmNuCi9kbnMtcXVlcnk +sdns://AgAAAAAAAAAAACBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTApkb2guMzYwLmNuCi9kbnMtcXVlcnk ## quad101 diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 48936290..febe7561 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5xzMiT8tVoAVByfCHRJ8nKjGA73gIP+rKs3pBK4ba2UgHguL7L3yi1MQ3KaDUcM6+osPJBEix+0JrmgCvbTuPAU= -trusted comment: timestamp:1716119216 file:public-resolvers.md -60483QiYEzwd82N1UZFLSXCesP3JEz0/+IzCQdCabI3XcgZkn9P9VJEp3NYDvbH+q3OzrXQUfbUD3poLG49iAA== +RWQf6LRCGA9i5x6cOZaukAtXoy+5h94DjW4ZAFm2qHrkCR0aqz6sOZQgz+DvO9w98u8UFDesdB92sniErIqN4mxgxRGlZBrxFgI= +trusted comment: timestamp:1716119449 file:public-resolvers.md +Yc0LZW/sxPwTukPRNT35cbNQkG7wC5HrAtOocCEWI/bf2mCAYA7ZU7stnfrTwvnoLB/IEW+QTo6aCCBboJmjAQ== From ed3e6139472da7209092205d8958b21584165f14 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:53:08 +0200 Subject: [PATCH 05/14] tuna-doh-ipv6 doesn't support DNSSEC --- v2/public-resolvers.md | 2 +- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 2 +- v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 8221faf0..89f36658 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -3439,7 +3439,7 @@ sdns://AgcAAAAAAAAAF1syYTAxOjRmODoxYzFlOjhjYmE6OjFdoBGxAuax9j5SiYTWAl8ysTgkH8iLv DoH server provided by Tsinghua University TUNA Association, located in mainland China, no GFW poisoning yet it has a manual blacklist. -sdns://AgEAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTB1kbnMudHVuYS50c2luZ2h1YS5lZHUuY246ODQ0MwovZG5zLXF1ZXJ5 +sdns://AgAAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTB1kbnMudHVuYS50c2luZ2h1YS5lZHUuY246ODQ0MwovZG5zLXF1ZXJ5 ## uncensoreddns-dk-ipv4 diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index ad89c895..6d580ede 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i50wpJ2IYEynB1HmN98qbZ6lDh7lrc4QfED7jo6Iz5IkgSisSRZVFdFbnVhFITMH73vVu4JTEE9BGmdYsBEzsBQY= -trusted comment: timestamp:1716119449 file:public-resolvers.md -SZ99xvYxUvSAFeAvo3xphuKBp265d6tSK/PKixZsqSA7kTlwdfjwmQhLr+J3GKBSdgSrGeWYX1RrSmmBmIuyBw== +RWQf6LRCGA9i57NU2BC0cv6jx+ntkseyOk8vsUyLePuyinMbdg8XlaxMsus4voxld4/2lsbPFxQz7pNtUi2BIzdE/2zFcLaJsg0= +trusted comment: timestamp:1716119588 file:public-resolvers.md +GI10eRJHjegJxGqwKeY/71opyAFdyrsAlKsabSpuhNYJ3X7bv1Yyf2rocffpd/CLreLC9prjMFb78sWuG2ifCQ== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 4266629c..77bab0bd 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3499,7 +3499,7 @@ sdns://AgcAAAAAAAAAF1syYTAxOjRmODoxYzFlOjhjYmE6OjFdoBGxAuax9j5SiYTWAl8ysTgkH8iLv DoH server provided by Tsinghua University TUNA Association, located in mainland China, no GFW poisoning yet it has a manual blacklist. -sdns://AgEAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTB1kbnMudHVuYS50c2luZ2h1YS5lZHUuY246ODQ0MwovZG5zLXF1ZXJ5 +sdns://AgAAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5bixZzkbbe5e0pKxyiOnTB1kbnMudHVuYS50c2luZ2h1YS5lZHUuY246ODQ0MwovZG5zLXF1ZXJ5 ## uncensoreddns-dk-ipv4 diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index febe7561..e156c8d8 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5x6cOZaukAtXoy+5h94DjW4ZAFm2qHrkCR0aqz6sOZQgz+DvO9w98u8UFDesdB92sniErIqN4mxgxRGlZBrxFgI= -trusted comment: timestamp:1716119449 file:public-resolvers.md -Yc0LZW/sxPwTukPRNT35cbNQkG7wC5HrAtOocCEWI/bf2mCAYA7ZU7stnfrTwvnoLB/IEW+QTo6aCCBboJmjAQ== +RWQf6LRCGA9i57fWZEHM4GM4BA3axF1Pp2btzD1WYU8Y+CK3ItiFL9ObRCr/iyvVYh+y7eKymg+LoToObVnFZgf4aUcq8FirpQQ= +trusted comment: timestamp:1716119588 file:public-resolvers.md +SltZB7tpamxkFwglR6PaiLnmcae8sKatVZ5wEvgQ4ow+mrjZRYRBuvnM/r3PPeG6RVGrYotGpQImZfWiVG5yDw== From 5c72c439f0f9bb64d78d90edf2a6142ea3fed28b Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 13:55:18 +0200 Subject: [PATCH 06/14] UncensoredDNS doesn't support DNSSEC --- v2/public-resolvers.md | 16 ++++++++-------- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 16 ++++++++-------- v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 22 insertions(+), 22 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 89f36658..a60c7337 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -3445,33 +3445,33 @@ sdns://AgAAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5 ## uncensoreddns-dk-ipv4 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, unicast hosted in Denmark - https://blog.uncensoreddns.org +DoH, no logs, no filter, unicast hosted in Denmark - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAADDg5LjIzMy40My43MaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk +sdns://AgYAAAAAAAAADDg5LjIzMy40My43MaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk ## uncensoreddns-dk-ipv6 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, unicast hosted in Denmark - https://blog.uncensoreddns.org +DoH, no logs, no filter, unicast hosted in Denmark - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAAElsyYTAxOjNhMDo1Mzo1Mzo6XaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk +sdns://AgYAAAAAAAAAElsyYTAxOjNhMDo1Mzo1Mzo6XaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk ## uncensoreddns-ipv4 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, anycast - https://blog.uncensoreddns.org +DoH, no logs, no filter, anycast - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAADjkxLjIzOS4xMDAuMTAwoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ +sdns://AgYAAAAAAAAADjkxLjIzOS4xMDAuMTAwoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ ## uncensoreddns-ipv6 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, anycast - https://blog.uncensoreddns.org +DoH, no logs, no filter, anycast - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAAEVsyMDAxOjY3YzoyOGE0OjpdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ +sdns://AgYAAAAAAAAAEVsyMDAxOjY3YzoyOGE0OjpdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ ## userspace-australia diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 6d580ede..f54fe6bc 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i57NU2BC0cv6jx+ntkseyOk8vsUyLePuyinMbdg8XlaxMsus4voxld4/2lsbPFxQz7pNtUi2BIzdE/2zFcLaJsg0= -trusted comment: timestamp:1716119588 file:public-resolvers.md -GI10eRJHjegJxGqwKeY/71opyAFdyrsAlKsabSpuhNYJ3X7bv1Yyf2rocffpd/CLreLC9prjMFb78sWuG2ifCQ== +RWQf6LRCGA9i56aNQRExQVsZ770jPnyu+kXmhwsA7000snXDkV224J4EPzH23XNBj/FKbtFI0bLYR0cg7KVbHyxGaMr0KaiIjAM= +trusted comment: timestamp:1716119718 file:public-resolvers.md +fSThiWbcOimoRls24tu8KsHITpiISweCKYOkv9wHgxnS26eqW2FN8/sFobM8uWUCKWeMgnReBGt7CTOGJEfmCg== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 77bab0bd..f24798d8 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3505,33 +3505,33 @@ sdns://AgAAAAAAAAAAG1syNDAyOmYwMDA6MTo0MTY6MTAxOjY6Njo2XSBZPi1Jp0AjVVUmrvm3QisZ5 ## uncensoreddns-dk-ipv4 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, unicast hosted in Denmark - https://blog.uncensoreddns.org +DoH, no logs, no filter, unicast hosted in Denmark - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAADDg5LjIzMy40My43MaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk +sdns://AgYAAAAAAAAADDg5LjIzMy40My43MaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk ## uncensoreddns-dk-ipv6 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, unicast hosted in Denmark - https://blog.uncensoreddns.org +DoH, no logs, no filter, unicast hosted in Denmark - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAAElsyYTAxOjNhMDo1Mzo1Mzo6XaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk +sdns://AgYAAAAAAAAAElsyYTAxOjNhMDo1Mzo1Mzo6XaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhl1bmljYXN0LnVuY2Vuc29yZWRkbnMub3JnCi9kbnMtcXVlcnk ## uncensoreddns-ipv4 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, anycast - https://blog.uncensoreddns.org +DoH, no logs, no filter, anycast - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAADjkxLjIzOS4xMDAuMTAwoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ +sdns://AgYAAAAAAAAADjkxLjIzOS4xMDAuMTAwoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ ## uncensoreddns-ipv6 Also known as censurfridns. -DoH, no logs, no filter, DNSSEC, anycast - https://blog.uncensoreddns.org +DoH, no logs, no filter, anycast - https://blog.uncensoreddns.org -sdns://AgcAAAAAAAAAEVsyMDAxOjY3YzoyOGE0OjpdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ +sdns://AgYAAAAAAAAAEVsyMDAxOjY3YzoyOGE0OjpdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOGWFueWNhc3QudW5jZW5zb3JlZGRucy5vcmcKL2Rucy1xdWVyeQ ## userspace-australia diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index e156c8d8..5a1d3e2b 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i57fWZEHM4GM4BA3axF1Pp2btzD1WYU8Y+CK3ItiFL9ObRCr/iyvVYh+y7eKymg+LoToObVnFZgf4aUcq8FirpQQ= -trusted comment: timestamp:1716119588 file:public-resolvers.md -SltZB7tpamxkFwglR6PaiLnmcae8sKatVZ5wEvgQ4ow+mrjZRYRBuvnM/r3PPeG6RVGrYotGpQImZfWiVG5yDw== +RWQf6LRCGA9i5zVeeycfn/kFw+mx+uXFG2/lQ4Wdf7gUGCh8/n7iLmaS+v6hbYTkvkH8d3c5hAUG9RMMTK6vw4bwQp7f8MVwyA8= +trusted comment: timestamp:1716119718 file:public-resolvers.md +M22isbRwu3BtHxa/xhr+HVLV9h2V/L+bjSJRNLDwLGpm+6KhT4WgzyuUsruAXZYdGN2fbvJGDL1/2hU7NxfnCQ== From 551bc7c0738772195fa0c136010973477988e3d3 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 19 May 2024 23:49:45 +0200 Subject: [PATCH 07/14] CI: update actions, check DNSSEC capability --- .github/workflows/ci.yml | 2 +- .github/workflows/prcheck.sh | 28 ++++++++++++++++++++++++++-- .github/workflows/prcheck.yml | 2 +- .github/workflows/resolverscheck.sh | 2 +- .github/workflows/resolverscheck.yml | 2 +- 5 files changed, 30 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index be2b4b52..b7003cbb 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,7 +11,7 @@ jobs: run: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: check with dnscrypt-proxy run: | diff --git a/.github/workflows/prcheck.sh b/.github/workflows/prcheck.sh index bb8dea8b..94a414fe 100755 --- a/.github/workflows/prcheck.sh +++ b/.github/workflows/prcheck.sh @@ -1,6 +1,6 @@ #! /bin/sh -DNSLOOKUP_VERSION=1.5.1 +DNSLOOKUP_VERSION=1.10.1 case "$(uname -ms)" in Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;; @@ -74,7 +74,7 @@ if [ ! -s "$NEW_ENTRIES" ]; then exit 0 fi -curl -qL https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.1.3/dnscrypt-proxy-linux_x86_64-2.1.3.tar.gz | tar xzvf - +curl -qL https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.1.5/dnscrypt-proxy-linux_x86_64-2.1.5.tar.gz | tar xzvf - cd linux-x86_64 || exit 1 exit_code=0 @@ -83,6 +83,8 @@ CONFIG="test-dnscrypt-proxy.toml" PIDFILE="dnscrypt-proxy.pid" LOGFILE="dnscrypt-proxy.log" while read -r stamp; do + echo + echo ======================== echo echo "* Checking resolver with stamp:" echo "$stamp" @@ -97,7 +99,24 @@ while read -r stamp; do echo '[static."test"]' echo "stamp = '${stamp}'" } >"$CONFIG" + + if ! ./dnscrypt-proxy -config "$CONFIG" -show-certs; then + exit_code=1 + fi + echo + echo --- + echo + + dnssec=false + if ./dnscrypt-proxy -config "$CONFIG" -list -json | grep -F '"dnssec": true' >/dev/null; then + dnssec=true + echo "DNSSEC support is expected" + else + echo "DNSSEC support is not expected" + fi + ./dnscrypt-proxy -config "$CONFIG" -pidfile "$PIDFILE" -logfile "$LOGFILE" -loglevel 1 & + sleep 5 skip_log=false if grep -q 'DNSCrypt relay' "$LOGFILE"; then @@ -110,6 +129,11 @@ while read -r stamp; do echo "** UNABLE TO GET A RESPONSE FROM THE RESOLVER **" echo "Bogus stamp: ${stamp}" exit_code=1 + elif $dnssec; then + if ./dnscrypt-proxy -config "$CONFIG" -resolve -check example.com | grep -F "resolver doesn't support DNSSEC" >/dev/null; then + echo "** DNSSEC SUPPORT IS EXPECTED BUT NOT DETECTED **" + exit_code=1 + fi fi kill $(cat "$PIDFILE") if [ "$skip_log" = false ]; then diff --git a/.github/workflows/prcheck.yml b/.github/workflows/prcheck.yml index 17560a12..bdb0164e 100644 --- a/.github/workflows/prcheck.yml +++ b/.github/workflows/prcheck.yml @@ -11,7 +11,7 @@ jobs: prcheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: new entries run: .github/workflows/prcheck.sh diff --git a/.github/workflows/resolverscheck.sh b/.github/workflows/resolverscheck.sh index aa1923d2..4bbe23ec 100755 --- a/.github/workflows/resolverscheck.sh +++ b/.github/workflows/resolverscheck.sh @@ -1,6 +1,6 @@ #! /bin/sh -DNSLOOKUP_VERSION=1.5.1 +DNSLOOKUP_VERSION=1.10.1 case "$(uname -ms)" in Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;; diff --git a/.github/workflows/resolverscheck.yml b/.github/workflows/resolverscheck.yml index 2ce1e3a4..bfe9a5c2 100644 --- a/.github/workflows/resolverscheck.yml +++ b/.github/workflows/resolverscheck.yml @@ -11,7 +11,7 @@ jobs: resolverscheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: resolvers check run: .github/workflows/resolverscheck.sh From 64ecaa8b05054cfbfb24e56b55614e6cb6c51e3a Mon Sep 17 00:00:00 2001 From: demarcush <146051763+demarcush@users.noreply.github.com> Date: Thu, 23 May 2024 21:11:43 +0000 Subject: [PATCH 08/14] Revert Meganerd merge (#909) Co-authored-by: Frank Denis <124872+jedisct1@users.noreply.github.com> --- v3/public-resolvers.md | 24 +++++++++++++++++++++--- 1 file changed, 21 insertions(+), 3 deletions(-) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index f24798d8..a8f891b7 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -2891,26 +2891,44 @@ sdns://AgIAAAAAAAAADjExNi4yMDIuMTc2LjI2oBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU ## meganerd -DNSCrypt server by MegaNerd.nl - https://meganerd.nl/encrypted-dns-server +DNSCrypt server by MegaNerd.nl (IPv4) - https://meganerd.nl/encrypted-dns-server Hosted in Amsterdam (AMS1), The Netherlands. Non-logging, non-filtering, supports DNSSEC. sdns://AQcAAAAAAAAADTk1LjE3OS4xMzEuODIgIRiZQdNmDJj8zSxSbb1qzEEAU3Pjo0sVBjpJdICkfj4hMi5kbnNjcnlwdC1jZXJ0LnNub2tlLm1lZ2FuZXJkLm5s -sdns://AQcAAAAAAAAAGFsyYTA1OmY0ODA6MTQwMDoyYjAwOjoxXSAhGJlB02YMmPzNLFJtvWrMQQBTc-OjSxUGOkl0gKR-PiEyLmRuc2NyeXB0LWNlcnQuc25va2UubWVnYW5lcmQubmw ## meganerd-doh -DoH server by MegaNerd.nl - https://meganerd.nl/encrypted-dns-server +DoH server by MegaNerd.nl (IPv4) - https://meganerd.nl/encrypted-dns-server Hosted in Amsterdam (AMS1), The Netherlands. Non-logging, non-filtering, supports DNSSEC. sdns://AgcAAAAAAAAADTk1LjE3OS4xMzEuODKgEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Rc25va2UubWVnYW5lcmQubmwKL2Rucy1xdWVyeQ + + +## meganerd-doh-ipv6 + +DoH server by MegaNerd.nl (IPv6) - https://meganerd.nl/encrypted-dns-server +Hosted in Amsterdam (AMS1), The Netherlands. + +Non-logging, non-filtering, supports DNSSEC. + sdns://AgcAAAAAAAAAGFsyYTA1OmY0ODA6MTQwMDoyYjAwOjoxXaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFzbm9rZS5tZWdhbmVyZC5ubAovZG5zLXF1ZXJ5 +## meganerd-ipv6 + +DNSCrypt server by MegaNerd.nl (IPv6) - https://meganerd.nl/encrypted-dns-server +Hosted in Amsterdam (AMS1), The Netherlands. + +Non-logging, non-filtering, supports DNSSEC. + +sdns://AQcAAAAAAAAAGFsyYTA1OmY0ODA6MTQwMDoyYjAwOjoxXSAhGJlB02YMmPzNLFJtvWrMQQBTc-OjSxUGOkl0gKR-PiEyLmRuc2NyeXB0LWNlcnQuc25va2UubWVnYW5lcmQubmw + + ## mullvad-adblock-doh Same as mullvad-doh but blocks ads and trackers. From 22235444e6cf2523d59e054bc007563559aa1f83 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 23 May 2024 23:11:57 +0200 Subject: [PATCH 09/14] Sign --- v1/dnscrypt-resolvers.csv | 3 ++- v1/dnscrypt-resolvers.csv.minisig | 6 +++--- v2/public-resolvers.md | 24 ++++++++++++++++++++++-- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md.minisig | 6 +++--- 5 files changed, 33 insertions(+), 12 deletions(-) diff --git a/v1/dnscrypt-resolvers.csv b/v1/dnscrypt-resolvers.csv index b0240a12..e1c0d76c 100644 --- a/v1/dnscrypt-resolvers.csv +++ b/v1/dnscrypt-resolvers.csv @@ -248,7 +248,8 @@ jp.tiar.app,jp.tiar.app,"Non-Logging, Non-Filtering DNSCrypt server in Japan.",, jp.tiar.app-ipv6,jp.tiar.app-ipv6,"Non-Logging, Non-Filtering DNSCrypt (IPv6) server in Japan.",,,,2,yes,yes,no,[2400:8902::f03c:91ff:feda:c514]:1443,2.dnscrypt-cert.jp.tiar.app,32B8:763E:F1BF:6536:A1DE:6A13:C0CD:6F48:A179:E388:B699:A537:8D6D:5B3C:4CDF:5453, ksol.io-ns2-dnscrypt-ipv4,ksol.io-ns2-dnscrypt-ipv4,"DNSCrypt on IPv4 (UDP/TCP). No DoH, doesn't log, doesn't filter, DNSSEC enforced. No EDNS Client-Subnet, padding enabled, as per `dnscrypt-server-docker` default unbound configuration. Location: Hungary",,,,2,yes,yes,no,193.201.188.48,2.dnscrypt-cert.ns2.ksol.io,1111:29D4:0980:B4A3:A824:8AF7:D7B6:7FF5:914D:0CC4:ABDF:FF0D:E5E5:405B:F1C6:167A, ksol.io-ns2-dnscrypt-ipv6,ksol.io-ns2-dnscrypt-ipv6,"DNSCrypt on IPv6 (UDP/TCP). No DoH, doesn't log, doesn't filter, DNSSEC enforced. No EDNS Client-Subnet, padding enabled, as per `dnscrypt-server-docker` default unbound configuration. Location: Hungary",,,,2,yes,yes,no,[2a01:6ee0:1::241:1],2.dnscrypt-cert.ns2.ksol.io,1111:29D4:0980:B4A3:A824:8AF7:D7B6:7FF5:914D:0CC4:ABDF:FF0D:E5E5:405B:F1C6:167A, -meganerd,meganerd,DNSCrypt server by MegaNerd.nl - https://meganerd.nl/encrypted-dns-server,,,,2,yes,yes,no,95.179.131.82,2.dnscrypt-cert.snoke.meganerd.nl,2118:9941:D366:0C98:FCCD:2C52:6DBD:6ACC:4100:5373:E3A3:4B15:063A:4974:80A4:7E3E, +meganerd,meganerd,DNSCrypt server by MegaNerd.nl (IPv4) - https://meganerd.nl/encrypted-dns-server,,,,2,yes,yes,no,95.179.131.82,2.dnscrypt-cert.snoke.meganerd.nl,2118:9941:D366:0C98:FCCD:2C52:6DBD:6ACC:4100:5373:E3A3:4B15:063A:4974:80A4:7E3E, +meganerd-ipv6,meganerd-ipv6,DNSCrypt server by MegaNerd.nl (IPv6) - https://meganerd.nl/encrypted-dns-server,,,,2,yes,yes,no,[2a05:f480:1400:2b00::1],2.dnscrypt-cert.snoke.meganerd.nl,2118:9941:D366:0C98:FCCD:2C52:6DBD:6ACC:4100:5373:E3A3:4B15:063A:4974:80A4:7E3E, plan9dns-fl,plan9dns-fl,"Miami Florida, USA. DNSCrypt, no filters, no logs, DNSSEC",,,,2,yes,yes,no,149.28.101.119:8443,2.dnscrypt-cert.pluton.plan9-dns.com,55A1:55E1:AF12:B487:F1F1:F9C2:C43C:5597:1A69:AA6F:A125:8C82:2AAB:4CB5:010D:9C2C, plan9dns-fl-ipv6,plan9dns-fl-ipv6,"Miami Florida, USA. DNSCrypt, no filters, no logs, DNSSEC",,,,2,yes,yes,no,[2001:19f0:9002:de4:5400:4ff:fe08:7de3]:8443,2.dnscrypt-cert.pluton.plan9-dns.com,55A1:55E1:AF12:B487:F1F1:F9C2:C43C:5597:1A69:AA6F:A125:8C82:2AAB:4CB5:010D:9C2C, plan9dns-mx,plan9dns-mx,"Mexico City, MX. DNSCrypt, no filters, no logs, DNSSEC",,,,2,yes,yes,no,216.238.80.219:8443,2.dnscrypt-cert.helios.plan9-dns.com,2A63:C2BA:2DF9:AED3:A3F7:293B:734E:EC12:D0BF:2A1C:A8FF:DFC7:7293:B6DC:60AB:A0DB, diff --git a/v1/dnscrypt-resolvers.csv.minisig b/v1/dnscrypt-resolvers.csv.minisig index 3b60d32f..4f8f7976 100644 --- a/v1/dnscrypt-resolvers.csv.minisig +++ b/v1/dnscrypt-resolvers.csv.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5578GYH3p6BmzJw5QhEOGmedw6h8MRpWWU8YNOcRMBgpOdlUc8xIsE+xL1SIaqlk2Utns4RnziOlStjH8J6g7wY= -trusted comment: timestamp:1716118911 file:dnscrypt-resolvers.csv -3KQasTYX1e1EZjI8ABHdp1gtXYX5A44ebPLJlUOLFA1m4jmtnQRgGjHcpLJtl2uqGmL9DYG9nqsVN3OErDgmAQ== +RWQf6LRCGA9i52mFkX/pN1bnYOGG1wzenkKsU5O1i/+jirYUFBLzjjnfbzvX7BO+OEWDGMY1ZYnm/fctLQpVRbNlg9K94rVm3QQ= +trusted comment: timestamp:1716498714 file:dnscrypt-resolvers.csv +6+YXOXuh3LLJAVLS/4hBFlVH/meLeTTJVxnCeTap+b25HDcopv2kukTinDiH+W4I6/x+lsVdrYGepV3d8DpLAw== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index a60c7337..716636fe 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -2860,7 +2860,7 @@ sdns://AgIAAAAAAAAADjExNi4yMDIuMTc2LjI2oBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU ## meganerd -DNSCrypt server by MegaNerd.nl - https://meganerd.nl/encrypted-dns-server +DNSCrypt server by MegaNerd.nl (IPv4) - https://meganerd.nl/encrypted-dns-server Hosted in Amsterdam (AMS1), The Netherlands. Non-logging, non-filtering, supports DNSSEC. @@ -2870,7 +2870,7 @@ sdns://AQcAAAAAAAAADTk1LjE3OS4xMzEuODIgIRiZQdNmDJj8zSxSbb1qzEEAU3Pjo0sVBjpJdICkf ## meganerd-doh -DoH server by MegaNerd.nl - https://meganerd.nl/encrypted-dns-server +DoH server by MegaNerd.nl (IPv4) - https://meganerd.nl/encrypted-dns-server Hosted in Amsterdam (AMS1), The Netherlands. Non-logging, non-filtering, supports DNSSEC. @@ -2878,6 +2878,26 @@ Non-logging, non-filtering, supports DNSSEC. sdns://AgcAAAAAAAAADTk1LjE3OS4xMzEuODKgEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Rc25va2UubWVnYW5lcmQubmwKL2Rucy1xdWVyeQ +## meganerd-doh-ipv6 + +DoH server by MegaNerd.nl (IPv6) - https://meganerd.nl/encrypted-dns-server +Hosted in Amsterdam (AMS1), The Netherlands. + +Non-logging, non-filtering, supports DNSSEC. + +sdns://AgcAAAAAAAAAGFsyYTA1OmY0ODA6MTQwMDoyYjAwOjoxXaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhFzbm9rZS5tZWdhbmVyZC5ubAovZG5zLXF1ZXJ5 + + +## meganerd-ipv6 + +DNSCrypt server by MegaNerd.nl (IPv6) - https://meganerd.nl/encrypted-dns-server +Hosted in Amsterdam (AMS1), The Netherlands. + +Non-logging, non-filtering, supports DNSSEC. + +sdns://AQcAAAAAAAAAGFsyYTA1OmY0ODA6MTQwMDoyYjAwOjoxXSAhGJlB02YMmPzNLFJtvWrMQQBTc-OjSxUGOkl0gKR-PiEyLmRuc2NyeXB0LWNlcnQuc25va2UubWVnYW5lcmQubmw + + ## mullvad-adblock-doh Same as mullvad-doh but blocks ads and trackers. diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index f54fe6bc..04533a9e 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i56aNQRExQVsZ770jPnyu+kXmhwsA7000snXDkV224J4EPzH23XNBj/FKbtFI0bLYR0cg7KVbHyxGaMr0KaiIjAM= -trusted comment: timestamp:1716119718 file:public-resolvers.md -fSThiWbcOimoRls24tu8KsHITpiISweCKYOkv9wHgxnS26eqW2FN8/sFobM8uWUCKWeMgnReBGt7CTOGJEfmCg== +RWQf6LRCGA9i5yQiH0GRSHyXuFi0fcv/jK17Pi5lyBEXFS330AKV9zeUwpV2D/tU+SX5mqNjWN53n+Yeh/q0OxeTWn+65CzknQ4= +trusted comment: timestamp:1716498714 file:public-resolvers.md +sns3+YJz4yfsjl9FOvVoREhUouOBeun+OhPhWn5p8qNs+itbCplUy3UNIcCRndiS48NHIjfsC9MdZSi6Av9kDw== diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 5a1d3e2b..2591c4b8 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5zVeeycfn/kFw+mx+uXFG2/lQ4Wdf7gUGCh8/n7iLmaS+v6hbYTkvkH8d3c5hAUG9RMMTK6vw4bwQp7f8MVwyA8= -trusted comment: timestamp:1716119718 file:public-resolvers.md -M22isbRwu3BtHxa/xhr+HVLV9h2V/L+bjSJRNLDwLGpm+6KhT4WgzyuUsruAXZYdGN2fbvJGDL1/2hU7NxfnCQ== +RWQf6LRCGA9i59shhfE9L7CnLZ3GDUBuOZom1RckHCgxAHNnYGS0iegNgaISO/pUaqKUNcSaBUBo3XSmR9RB/cBnEhb3R5sh7Q4= +trusted comment: timestamp:1716498714 file:public-resolvers.md +9tULCC9ySPkAmK7rV4Dw0Hrf2K0eSSu3KPgBydtSoJnkmutzHYww2aY0yN+lP9NvF/01TLkKfb4XbtHtmxmvDw== From 42958bb69e9ef7992a3b60bf69a8eb33d44882be Mon Sep 17 00:00:00 2001 From: demarcush <146051763+demarcush@users.noreply.github.com> Date: Thu, 23 May 2024 21:27:04 +0000 Subject: [PATCH 10/14] Update Comodo (#912) Co-authored-by: Frank Denis <124872+jedisct1@users.noreply.github.com> --- v3/public-resolvers.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index a8f891b7..089020a5 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -469,6 +469,8 @@ sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwMl0AG3NlY3VyaXR5LmNsb3VkZmxhcmUtZ Comodo Dome Shield (anycast) - https://cdome.comodo.com/shield/ sdns://AQUAAAAAAAAACjguMjAuMjQ3LjIg0sJUqpYcHsoXmZb1X7yAHwg2xyN5q1J-zaiGG-Dgs7AoMi5kbnNjcnlwdC1jZXJ0LnNoaWVsZC0yLmRuc2J5Y29tb2RvLmNvbQ +sdns://AQUAAAAAAAAACzguMjAuMjQ3LjIwINLCVKqWHB7KF5mW9V-8gB8INscjeatSfs2ohhvg4LOwKDIuZG5zY3J5cHQtY2VydC5zaGllbGQtMi5kbnNieWNvbW9kby5jb20 +sdns://AQUAAAAAAAAACjguMjYuNTYuMjYg0sJUqpYcHsoXmZb1X7yAHwg2xyN5q1J-zaiGG-Dgs7AoMi5kbnNjcnlwdC1jZXJ0LnNoaWVsZC0yLmRuc2J5Y29tb2RvLmNvbQ ## controld-block-malware From a9081edc8357036b7493ea261bc1f5639f9d2b09 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 23 May 2024 23:27:13 +0200 Subject: [PATCH 11/14] Sign --- v3/public-resolvers.md.minisig | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 2591c4b8..d5b11fde 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i59shhfE9L7CnLZ3GDUBuOZom1RckHCgxAHNnYGS0iegNgaISO/pUaqKUNcSaBUBo3XSmR9RB/cBnEhb3R5sh7Q4= -trusted comment: timestamp:1716498714 file:public-resolvers.md -9tULCC9ySPkAmK7rV4Dw0Hrf2K0eSSu3KPgBydtSoJnkmutzHYww2aY0yN+lP9NvF/01TLkKfb4XbtHtmxmvDw== +RWQf6LRCGA9i56vgDfV9VKFa4cMyrXIIscXSLPAH/Xj7o682yHFNXzp1TqzWCoycYFQB0vathVt5f0AQQtS/ylLnGACTJ+as0Q0= +trusted comment: timestamp:1716499633 file:public-resolvers.md +zRfOwTKwdkn8y//ERl5M2KmHjE+9Mwa/XEI2WJ0nWCP5gQW53oLMMfNIdliFeUST3M07ahWJNRqFpRmzFH+cCA== From 1e36e91ba6081f6b224575a872a6d5d354649c3d Mon Sep 17 00:00:00 2001 From: demarcush <146051763+demarcush@users.noreply.github.com> Date: Thu, 23 May 2024 21:28:50 +0000 Subject: [PATCH 12/14] Update Wikimedia: add certificate hashes (#916) - Add hash Co-authored-by: Frank Denis <124872+jedisct1@users.noreply.github.com> --- v3/public-resolvers.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 089020a5..479ceeb3 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3605,7 +3605,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4ABF3aWtpbWVkaWEtZG5zLm9yZwovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4IBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HoEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## wikimedia-ipv6 @@ -3619,7 +3619,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdABF3aWtpbWVkaWEtZG5zLm9yZwovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdIBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HoEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## yandex From 403376e3eda1f71510800a2579570f706c967914 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 23 May 2024 23:29:44 +0200 Subject: [PATCH 13/14] Sign --- v2/public-resolvers.md | 8 ++++---- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 12 ++++++------ v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 16 insertions(+), 16 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 716636fe..70831de0 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -2985,14 +2985,14 @@ sdns://AgcAAAAAAAAAACCaOjT3J965vKUQA9nOnDn48n3ZxSQpAcK6saROY1oCGQ5kbnMubmV4dGRuc Open, DNSSEC, No-log and No-filter DoH operated by https://nic.cz -sdns://AgcAAAAAAAAADDE4NS40My4xMzUuMSBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zgtvZHZyLm5pYy5jegovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAADDE4NS40My4xMzUuMaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zgtvZHZyLm5pYy5jegovZG5zLXF1ZXJ5 ## nic.cz-ipv6 Open, DNSSEC, No-log and No-filter DoH over IPv6 operated by https://nic.cz -sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZTo6MV0gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ +sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZTo6MV2gEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ ## njalla-doh @@ -3543,7 +3543,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4ABF3aWtpbWVkaWEtZG5zLm9yZwovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4oBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## wikimedia-ipv6 @@ -3557,7 +3557,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdABF3aWtpbWVkaWEtZG5zLm9yZwovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## yandex diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 04533a9e..a8e6aa23 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5yQiH0GRSHyXuFi0fcv/jK17Pi5lyBEXFS330AKV9zeUwpV2D/tU+SX5mqNjWN53n+Yeh/q0OxeTWn+65CzknQ4= -trusted comment: timestamp:1716498714 file:public-resolvers.md -sns3+YJz4yfsjl9FOvVoREhUouOBeun+OhPhWn5p8qNs+itbCplUy3UNIcCRndiS48NHIjfsC9MdZSi6Av9kDw== +RWQf6LRCGA9i50zBJvYIVJxkAuTH7oF2OW9UHvXiKWr/EUPJZ0JEwMHFaBuTCj+pgdVJskvSyT2yqJUR2QIrKo55VBFAGgh3Nw0= +trusted comment: timestamp:1716499771 file:public-resolvers.md +6IgTLNKto7TrNTB4aJM3x8Q7s6Ui1h6bla+vty0KelJwBx88tHck7AfXXfit/cF13Ez0l/vbU0E+X4SuOqqDBQ== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 479ceeb3..d9f298f9 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3018,16 +3018,16 @@ sdns://AgcAAAAAAAAAACCaOjT3J965vKUQA9nOnDn48n3ZxSQpAcK6saROY1oCGQ5kbnMubmV4dGRuc Open, DNSSEC, No-log and No-filter DoH operated by https://nic.cz -sdns://AgcAAAAAAAAADDE4NS40My4xMzUuMSBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zgtvZHZyLm5pYy5jegovZG5zLXF1ZXJ5 -sdns://AgcAAAAAAAAACzE5My4xNy40Ny4xIEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOC29kdnIubmljLmN6Ci9kbnMtcXVlcnk +sdns://AgcAAAAAAAAADDE4NS40My4xMzUuMaARsQLmsfY-UomE1gJfMrE4JB_Ii711GVdNcMmDLVPh6KBa74Q__PLscFX1BKFi8in4ORw3D_OmFj0ts_PWBNYiviBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zgtvZHZyLm5pYy5jegovZG5zLXF1ZXJ5 +sdns://AgcAAAAAAAAACzE5My4xNy40Ny4xoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOC29kdnIubmljLmN6Ci9kbnMtcXVlcnk ## nic.cz-ipv6 Open, DNSSEC, No-log and No-filter DoH over IPv6 operated by https://nic.cz -sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZTo6MV0gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ -sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZjo6MV0gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ +sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZTo6MV2gEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ +sdns://AgcAAAAAAAAAE1syMDAxOjE0OGY6ZmZmZjo6MV2gEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Lb2R2ci5uaWMuY3oKL2Rucy1xdWVyeQ ## njalla-doh @@ -3605,7 +3605,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4IBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HoEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAADjE4NS43MS4xMzguMTM4oBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## wikimedia-ipv6 @@ -3619,7 +3619,7 @@ Reliability Engineering (Traffic) team at the Foundation. Wikimedia DNS helps prevent some surveillance and censorship of our wikis and other websites by securing DNS lookups. -sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdIBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HoEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAAEVsyMDAxOjY3Yzo5MzA6OjFdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEXdpa2ltZWRpYS1kbnMub3JnCi9kbnMtcXVlcnk ## yandex diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index d5b11fde..acfce29d 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i56vgDfV9VKFa4cMyrXIIscXSLPAH/Xj7o682yHFNXzp1TqzWCoycYFQB0vathVt5f0AQQtS/ylLnGACTJ+as0Q0= -trusted comment: timestamp:1716499633 file:public-resolvers.md -zRfOwTKwdkn8y//ERl5M2KmHjE+9Mwa/XEI2WJ0nWCP5gQW53oLMMfNIdliFeUST3M07ahWJNRqFpRmzFH+cCA== +RWQf6LRCGA9i5xg91G7UrGDmLct3UvFkgtXeZZkKLhHVcyfM3ZkkNRfeZt7SIuGa2Hwow3xPVIRq8eZGh465S/6h8HN2Q7NTagY= +trusted comment: timestamp:1716499771 file:public-resolvers.md +E8uAXUCiI2Igh4ULz4iF6bKvgT4sV9r1rxlh5sNv+nTdH5VSLhpsXgeBXlGQUiptrCbDLU+8a8YC/zmo5AX5Ag== From 6a3eb43b0f37662cb6cb8716f077204fbb3ed731 Mon Sep 17 00:00:00 2001 From: demarcush <146051763+demarcush@users.noreply.github.com> Date: Thu, 23 May 2024 21:34:28 +0000 Subject: [PATCH 14/14] Update Switch (#915) Co-authored-by: Frank Denis <124872+jedisct1@users.noreply.github.com> --- v3/public-resolvers.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index d9f298f9..97347869 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -3485,13 +3485,21 @@ sdns://AgcAAAAAAAAADTQ1LjE1My4xODcuOTagEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4 ## switch -Public DoH service provided by SWITCH in Switzerland +Public DoH service provided by SWITCH in Switzerland. Provides protection against malware, but does not block ads. +Homepage: https://www.switch.ch -https://www.switch.ch -Provides protection against malware, but does not block ads. +sdns://AgMAAAAAAAAAACCwGSB0S7t2yasFPgHge34FDkc9IPefe-pDX6_kPJ0kLw0xMzAuNTkuMzEuMjQ4Ci9kbnMtcXVlcnk +sdns://AgMAAAAAAAAAACCwGSB0S7t2yasFPgHge34FDkc9IPefe-pDX6_kPJ0kLw0xMzAuNTkuMzEuMjUxCi9kbnMtcXVlcnk -sdns://AgMAAAAAAAAAACCwGSB0S7t2yasFPgHge34FDkc9IPefe-pDX6_kPJ0kLw1kbnMuc3dpdGNoLmNoCi9kbnMtcXVlcnk + +## switch-ipv6 + +Public DoH (IPv6) service provided by SWITCH in Switzerland. Provides protection against malware, but does not block ads. +Homepage: https://www.switch.ch + +sdns://AgMAAAAAAAAAACCwGSB0S7t2yasFPgHge34FDkc9IPefe-pDX6_kPJ0kLxJbMjAwMTo2MjA6MDpmZjo6Ml0KL2Rucy1xdWVyeQ +sdns://AgMAAAAAAAAAACCwGSB0S7t2yasFPgHge34FDkc9IPefe-pDX6_kPJ0kLxJbMjAwMTo2MjA6MDpmZjo6M10KL2Rucy1xdWVyeQ ## techsaviours.org-dnscrypt