• KairuByte@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    1 year ago

    Running your own DNS server doesn’t do much, unless your users are polling that DNS server, or a DNS server that pulls from it. No large DNS provider is going to honor your random ass DNS servers mappings, and that’s a good thing.

    And honestly, trusting some random DNS server isn’t a good idea. All it takes is one malicious entry and https://google.com suddenly loads in a cryptominer.

    • jmcs@discuss.tchncs.de
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      I think he means he’s running the name server for his zone (i.e. the authority for subdomains of his domains), which of course doesn’t help if the top level domain gets suspended and the NS record gets deleted.

      • KairuByte@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        2
        arrow-down
        1
        ·
        1 year ago

        Yes, but my browser doesn’t give a fuck. As it should be for many reasons, including general security.

        Your DNS only works for services/machines you have explicitly set to follow it, or devices under them in the network hierarchy.

        • Rob Bos@lemmy.ca
          link
          fedilink
          arrow-up
          2
          arrow-down
          1
          ·
          1 year ago

          That is nonsense. DNS is a federated system and my servers are authoritative for my domain.