From a94b40d68106d164822e62e63c53b81cae5d5012 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Tue, 14 Jan 2020 12:05:33 +0100 Subject: [PATCH] Remove hashes from cloudflare servers Their certificate chain keeps changing, so unlike all other resolvers, we can't reliabily verify it. Fixes https://github.com/DNSCrypt/dnscrypt-proxy/issues/1148 --- v2/public-resolvers.md | 4 ++-- v2/public-resolvers.md.minisig | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index e5b2dad1..c5e403ea 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -562,14 +562,14 @@ sdns://AQMAAAAAAAAAEjE4NS4yMjguMTY4Ljk6ODQ0MyC8rDL61UNpFx8IMtYHUCfDIIzu8Ojpn5QY3 Cloudflare DNS (anycast) - aka 1.1.1.1 / 1.0.0.1 -sdns://AgcAAAAAAAAABzEuMC4wLjEgPaS3FjSkE8HO80qpbSWkAWNNTPNsOxM8dClOSOY3ASoSZG5zLmNsb3VkZmxhcmUuY29tCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAABzEuMC4wLjEAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5 ## cloudflare-ipv6 Cloudflare DNS over IPv6 (anycast) -sdns://AgcAAAAAAAAAGVsyNjA2OjQ3MDA6NDcwMDo6MTExMV06NTMgPaS3FjSkE8HO80qpbSWkAWNNTPNsOxM8dClOSOY3ASoSZG5zLmNsb3VkZmxhcmUuY29tCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAAGVsyNjA2OjQ3MDA6NDcwMDo6MTExMV06NTMAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5 ## commons-host diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index d1800169..de7e1952 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i51kcY7sdHfCBE7qL6Nf+ZjcNLefkMbQd4OIY9Zil28PTQ+GFOhUUpT/gIBm5ErsH30mfowGtXgrigNy7vPN2oAw= -trusted comment: timestamp:1578860888 file:public-resolvers.md -bQeQFWFd+/dTj8HhTMY/5leEbdjoYJa8ys69WYiiZXmwXHNnCvMwm6BE3pMOTZlkVEvEDkesr55ObaRRIqR6Bw== +RWQf6LRCGA9i5xB6aKJfY0JFpKPCb50Enef/fUae4U6lIpXCQyZfV7y1Zhb43Z+5HVswfc0XnawOTHlRKvOmYhpd3XljOdyI9AE= +trusted comment: timestamp:1578999927 file:public-resolvers.md +8guxkVyYi+0DYDVwdIHEn5XSABWMLnIIzmkRf4yuEPcaHrK8vivvvVmOiCYq9X8YK7ang0klkoRh8pw8wyOnBQ==