The Global Cyber Alliance has given the world a new free Domain Name Service resolver, and advanced it as offering unusually strong security and privacy features.
The Quad9 DNS service, at 9.9.9.9, not only turns URIs into IP addresses, but also checks them against IBM X-Force's threat intelligence database. Those checks protect agains landing on any of the 40 billion evil sites and images X-Force has found to be dangerous.
The Alliance (GCA) was co-founded by the City of London Police, the District Attorney of New York County and the Center for Internet Security and styled itself "an international, cross-sector effort designed to confront, address, and prevent malicious cyber activity."
[...] The organisation promised that records of user lookups would not be put out to pasture in data farms: "Information about the websites consumers visit, where they live and what device they use are often captured by some DNS services and used for marketing or other purposes", it said. Quad9 won't "store, correlate, or otherwise leverage" personal information.
[...] If you're one of the lucky few whose ISP offers IPv6, there's a Quad9 resolver for you at 2620:fe::fe (the PCH public resolver).
https://www.theregister.co.uk/2017/11/20/quad9_secure_private_dns_resolver/
takyon: Do you want to give the City of London Police control of your DNS?
(Score: 0) by Anonymous Coward on Tuesday November 21 2017, @06:05PM (1 child)
what else did it fail to look up that you tested? did you make a capture to see if the query came back with a specific error code? user applications dont always show what went across the network.
not that nslookup is some glitzy flash in the pan that doesnt do its job, but the error is generic.
(Score: 2) by requerdanos on Tuesday November 21 2017, @06:40PM
Nothing. I only tested a handful of sites, but that's the only one that didn't resolve for me (and for at least some others, apparently). Some of the tries are posted elsewhere in the comments for this article.