←back to thread

1.1.1.1: Fast, privacy-first consumer DNS service

(blog.cloudflare.com)
1895 points _l4jh | 2 comments | 01 Apr 18 12:14 UTC | HN request time: 0.509s | source
Show context
ajross ◴[01 Apr 18 12:37 UTC] No.16727942[source]▶
This is the Cloudflare resolver, right? What's the "privacy-first" part about? It's just another third party DNS host. They haven't changed the protocol to be uninspectable and AFAIK haven't made any guarantees about logging or whatnot that would enhance privacy vs. using whatever you are now. This just means you're trusting Cloudflare instead of Comcast or Google or whoever.
replies(8): >>16727953 #>>16727957 #>>16727960 #>>16727965 #>>16727968 #>>16727969 #>>16727975 #>>16727978 #
shimms ◴[01 Apr 18 12:39 UTC] No.16727957[source]▶
Yes they have:

"Privacy First: Guaranteed. We will never sell your data or use it to target ads. Period. We will never log your IP address (the way other companies identify you). And we’re not just saying that. We’ve retained KPMG to audit our systems annually to ensure that we're doing what we say.

Frankly, we don’t want to know what you do on the Internet—it’s none of our business—and we’ve taken the technical steps to ensure we can’t."

replies(2): >>16728044 #>>16728461 #
dictum ◴[01 Apr 18 12:59 UTC] No.16728044[source]▶
> Frankly, we don’t want to know what you do on the Internet—it’s none of our business

In the DNS resolver space, what is their business?

replies(4): >>16728103 #>>16728205 #>>16728209 #>>16729210 #
tbyehl ◴[01 Apr 18 13:44 UTC] No.16728209[source]▶
Could be a precursor to launching an OpenDNS competitor.
replies(1): >>16728386 #
wtmt ◴[01 Apr 18 14:17 UTC] No.16728386[source]▶
Is OpenDNS even as relevant as it was earlier, before Google DNS appeared (and then OpenDNS was bought by Cisco)?
replies(1): >>16728574 #
1. tialaramex ◴[01 Apr 18 14:54 UTC] No.16728574[source]▶
Maybe not _as_ relevant, but still a considerable number of clients are configured to trust OpenDNS, and their far more ambiguous stance on what exactly this is for is appealing to some people. For example, OpenDNS says yes, absolutely it is their business what you're looking up, and maybe you are a Concerned Parent™ who wants to ensure their children don't access RedTube, so that feels like a good idea.
replies(1): >>16729128 #
2. tbyehl ◴[01 Apr 18 16:38 UTC] No.16729128[source]▶
I was thinking more along the lines of their SME offering. DNS filtering is an important layer in network security and CloudFlare’s position of being in the middle of a large portion of Internet traffic, alongside now trying to attract a chunk of general DNS queries, potentially gives them a great deal of insight into who the bad actors are.