From a9e5ebe46bf3b2e7c2fcdce10ef3a1e74cdc1520 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 4 Jan 2024 11:06:03 +0100 Subject: [PATCH] Revert "Re-add cert hashes for Cloudflare" This reverts commit d46ec48730cef5e2868d3e48e0780f1f9ee0a4b7. It took 5 days before breaking cloudflare-ipv6: [2024-01-04 10:59:07] [NOTICE] Advertised cert: [CN=cloudflare-dns.com,O=Cloudflare\, Inc.,L=San Francisco,ST=California,C=US] [8bb0c5bc0d9d151ee555e1d3f5a23bfb96921587fa564d2082c2eeafdea580a0] [2024-01-04 10:59:07] [NOTICE] Advertised cert: [CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1,O=DigiCert Inc,C=US] [2a15f5d6acb6e7c0901ade4ebbc743b2ccd489032b46e1642f0693683001258a] [2024-01-04 10:59:07] [CRITICAL] [cloudflare-ipv6] Certificate hash [880cfbfb5b0780a9a81e45bea74ec32ec622b359c9e5d7f53c469d74080966cf] not found --- v2/public-resolvers.md | 12 ++++++------ v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 18 +++++++++--------- v3/public-resolvers.md.minisig | 6 +++--- 4 files changed, 21 insertions(+), 21 deletions(-) diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index fd97d3e9..4608391e 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -411,42 +411,42 @@ sdns://AQMAAAAAAAAAFDE4NS4yMjguMTY4LjE2ODo4NDQzILysMvrVQ2kXHwgy1gdQJ8MgjO7w6Omfl Cloudflare DNS (anycast) - aka 1.1.1.1 / 1.0.0.1 -sdns://AgcAAAAAAAAABzEuMC4wLjGgnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8SZG5zLmNsb3VkZmxhcmUuY29tCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAABzEuMC4wLjEAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5 ## cloudflare-family Cloudflare DNS (anycast) with malware protection and parental control - aka 1.1.1.3 / 1.0.0.3 -sdns://AgMAAAAAAAAABzEuMC4wLjOgo4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8ZZmFtaWx5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 +sdns://AgMAAAAAAAAABzEuMC4wLjMAGWZhbWlseS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ ## cloudflare-family-ipv6 Cloudflare DNS over IPv6 (anycast) with malware protection and parental control -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExM12go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8ZZmFtaWx5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExM10AGWZhbWlseS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ ## cloudflare-ipv6 Cloudflare DNS over IPv6 (anycast) -sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMV2gnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8gMWRvdDFkb3QxZG90MS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ +sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMV0AIDFkb3QxZG90MWRvdDEuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk ## cloudflare-security Cloudflare DNS (anycast) with malware blocking - aka 1.1.1.2 / 1.0.0.2 -sdns://AgMAAAAAAAAABzEuMC4wLjKgo4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8bc2VjdXJpdHkuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk +sdns://AgMAAAAAAAAABzEuMC4wLjIAG3NlY3VyaXR5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 ## cloudflare-security-ipv6 Cloudflare DNS over IPv6 (anycast) with malware blocking -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMl2go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8bc2VjdXJpdHkuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMl0AG3NlY3VyaXR5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 ## comodo-02 diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 9fda44ba..a0cdd14e 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i57ogfoBOdEAjKL7ce2uwPU+yr7a6ZSOSbby5iNn0bhUanOu6MkYBvcxOuZh9OVM9H6q5YMfZdWZCOlQeGnNHFwI= -trusted comment: timestamp:1703893446 file:public-resolvers.md -oIn6hAEKytf5I/dzzgG5ekUROxMbnSg9D+AQc79P1yUicaOHI1zy770IMdvxWZ+RUSHHmVxQ1PhvGJCwU/aUCg== +RWQf6LRCGA9i54J4RruzXzU/a+XkJbU4KmgyxffCXOxC2BeVqoHj+eSHXmcjuuXPHLQ00+L7T1EpNqUTDPa377OhdUric/NIzAc= +trusted comment: timestamp:1703886198 file:public-resolvers.md +o76fYIKc4kX+L1ZY3T6+e3yIT0JCXE5dR5Fs5Jr5hQDkdT1aFHRfA5LPBDwesPu7rZxZOQZaa+igEX85nByYDA== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 486ab213..d6db834a 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -421,45 +421,45 @@ sdns://AQMAAAAAAAAAFDE4NS4yMjguMTY4LjE2ODo4NDQzILysMvrVQ2kXHwgy1gdQJ8MgjO7w6Omfl Cloudflare DNS (anycast) - aka 1.1.1.1 / 1.0.0.1 -sdns://AgcAAAAAAAAABzEuMC4wLjGgnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8SZG5zLmNsb3VkZmxhcmUuY29tCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAABzEuMC4wLjEAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5 ## cloudflare-family Cloudflare DNS (anycast) with malware protection and parental control - aka 1.1.1.3 / 1.0.0.3 -sdns://AgMAAAAAAAAABzEuMC4wLjOgo4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8ZZmFtaWx5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 +sdns://AgMAAAAAAAAABzEuMC4wLjMAGWZhbWlseS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ ## cloudflare-family-ipv6 Cloudflare DNS over IPv6 (anycast) with malware protection and parental control -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExM12go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8ZZmFtaWx5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwM12go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8ZZmFtaWx5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExM10AGWZhbWlseS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwM10AGWZhbWlseS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ ## cloudflare-ipv6 Cloudflare DNS over IPv6 (anycast) -sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMV2gnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8gMWRvdDFkb3QxZG90MS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ -sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwMV2gnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8gMWRvdDFkb3QxZG90MS5jbG91ZGZsYXJlLWRucy5jb20KL2Rucy1xdWVyeQ +sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMV0AIDFkb3QxZG90MWRvdDEuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk +sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwMV0AIDFkb3QxZG90MWRvdDEuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk ## cloudflare-security Cloudflare DNS (anycast) with malware blocking - aka 1.1.1.2 / 1.0.0.2 -sdns://AgMAAAAAAAAABzEuMC4wLjKgo4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8bc2VjdXJpdHkuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk +sdns://AgMAAAAAAAAABzEuMC4wLjIAG3NlY3VyaXR5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 ## cloudflare-security-ipv6 Cloudflare DNS over IPv6 (anycast) with malware blocking -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMl2go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8bc2VjdXJpdHkuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk -sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwMl2go4UOM7CslvzyXp3kxaRuMOSdrYjnjtaoJ-jcETnKcTegnLug_JYveisxxisbF1ot5MUKg5VyfjC2JqgACaeA49ggiAz7-1sHgKmoHkW-p07DLsYis1nJ5df1PEaddAgJZs8bc2VjdXJpdHkuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMl0AG3NlY3VyaXR5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 +sdns://AgMAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTAwMl0AG3NlY3VyaXR5LmNsb3VkZmxhcmUtZG5zLmNvbQovZG5zLXF1ZXJ5 ## comodo-02 diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 08c144fd..f272e7bf 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i52w4v3XPaHpqFkAE2QDnpZV7GaA4DrzZTu4iBTDYihTObZtARr9nag/Eq/UDZ4wmET6y3NnAeURshw58vYALQA0= -trusted comment: timestamp:1703893446 file:public-resolvers.md -dYlWvbAMhLrKXIndHc2o4tNz5lLHc1PTqPAVSM9W5QvHD144kfg3Kx2jzlL9PYvvzx536lmJOWJ5eL6DfbS1DQ== +RWQf6LRCGA9i5zNlLVxITyKavPIMevJ66A9DGxEHS1kVs04AlcRVAmz0JsuKx+oIihI9mdVI4mYQIQvri4zbViLAOwMG4n5A5w0= +trusted comment: timestamp:1703886198 file:public-resolvers.md +COP0zHZ3Lrm5urRHstkj8Kc58hg0E6WisKAUDgX6SrcASHxW4NS2wx4fOV7hFRu7mwcuS9eJVh72BKSEi5gnDQ==