93aa13d9e2 
							
						 
					 
					
						
						
							
							{systemd-resolved,unbound}: disable ECS with Quad9 in situations with multiple providers  
						
						
						
						
					 
					
						2025-10-22 17:48:57 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							9b175f7518 
							
						 
					 
					
						
						
							
							Address  https://dns0.eu/  discontinuation  
						
						
						
						
					 
					
						2025-10-18 15:31:07 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							710606caba 
							
						 
					 
					
						
						
							
							unbound: apparently I still use ECS  
						
						
						
						
					 
					
						2025-03-13 21:45:50 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ef69158c92 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: swap standard ports for excotic ones where available  
						
						
						
						
					 
					
						2025-03-13 08:40:49 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							2bd28c084c 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: comment servers currently not in my consideration  
						
						
						
						
					 
					
						2025-03-12 20:50:24 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c2e0917c3a 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: remove Quad9 ECS comments  
						
						
						
						
					 
					
						2024-05-18 16:14:57 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e6696d22f6 
							
						 
					 
					
						
						
							
							Revert "unbound/dns-over-tls.conf: remove ECS and private ECS"  
						
						... 
						
						
						
						This reverts commit 78fa2b7b9ca4cbb09eb386fcf3693e0e354dc717. 
						
						
					 
					
						2024-05-18 15:51:13 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							78fa2b7b9c 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: remove ECS and private ECS  
						
						
						
						
					 
					
						2024-05-14 15:01:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5672e14c89 
							
						 
					 
					
						
						
							
							Revert "Stop pretending issues of ECS weight more than pros of it after GApple upgrades delayed my going to bed."  
						
						... 
						
						
						
						This reverts commit afe50117fe1a98bb02f9736671dc7629c2444f30. 
						
						
					 
					
						2024-05-14 14:47:09 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							afe50117fe 
							
						 
					 
					
						
						
							
							Stop pretending issues of ECS weight more than pros of it after GApple upgrades delayed my going to bed.  
						
						
						
						
					 
					
						2024-05-14 11:06:01 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							252f77ab0c 
							
						 
					 
					
						
						
							
							systemd-resolved & unbound: comment ECS servers again.  
						
						... 
						
						
						
						This partially reverts 85c7fedcb21cfa3a173f7ff3d1a9e35d1f449086 and will be explained at https://aminda.eu/n/dns  soon 
						
						
					 
					
						2024-05-03 18:07:51 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							85c7fedcb2 
							
						 
					 
					
						
						
							
							systemd-resolved, unbound: only ECS IPv6  
						
						
						
						
					 
					
						2024-05-03 06:23:37 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a14446ed71 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: add Cloudflare, Mullvad & Control D  
						
						... 
						
						
						
						This is now practically https://www.privacyguides.org/en/dns/  plus Appliedprivacy 
						
						
					 
					
						2024-04-29 08:29:07 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							d17ad34650 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: note Applied Privacy does no ECS, add 853, add Quad9 unfiltered (ECS commented)  
						
						
						
						
					 
					
						2024-04-25 13:26:01 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1a1bf9adb9 
							
						 
					 
					
						
						
							
							unbound/conf.d: add vim modelines/filetypes  
						
						
						
						
					 
					
						2024-04-19 09:14:32 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							363be56010 
							
						 
					 
					
						
						
							
							unbound: move to tls-ystem-cert from tls-cert-bundle & disable qname minimization for DoT forward-zones  
						
						
						
						
					 
					
						2024-04-17 16:01:38 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							34b4ffb8ac 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: cut to 443 and private ECS capable non-filtering servers  
						
						
						
						
					 
					
						2023-08-04 12:45:03 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							d024ac1234 
							
						 
					 
					
						
						
							
							Revert "rm etc/unbound/unbound.conf.d/dns-over-tls.conf"  
						
						... 
						
						
						
						This reverts commit e9998f4079a274182ec25bdb9a6ae17f7f42b7a0. 
						
						
					 
					
						2023-08-04 12:27:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e9998f4079 
							
						 
					 
					
						
						
							
							rm etc/unbound/unbound.conf.d/dns-over-tls.conf  
						
						... 
						
						
						
						I think the file is inherently flawed due to different types of filtering/non-filtering resolvers, different locations, unknown ECS policies etc. Importantly I am not actively looking at this and just came across old version running in production 
						
						
					 
					
						2023-02-26 09:15:19 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							2e6a03d402 
							
						 
					 
					
						
						
							
							sastisfy editorconfig check  
						
						
						
						
					 
					
						2023-02-21 19:08:54 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							bfa51f500b 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: stop advertising Debian 9  
						
						
						
						
					 
					
						2021-10-05 12:34:10 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							75731868e7 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: allow non-Finnish anycast & note being used on servers  
						
						
						
						
					 
					
						2021-06-11 19:39:57 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e7a6e00b83 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls: comment Adguard & NextDNS for not being in FI  
						
						
						
						
					 
					
						2020-11-15 09:46:50 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							aadcc009a0 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: add Adguard (unfiltered) & NextDNS  
						
						
						
						
					 
					
						2020-11-12 16:12:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							f878041e2e 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: reverse order of providers  
						
						... 
						
						
						
						It seems to have some (small?) relevance to where queries go to. 
						
						
					 
					
						2020-10-29 16:24:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6e1f41533c 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: comment the 443 appliedprivacy  
						
						... 
						
						
						
						Thinking it a bit more, it's not useful to use their resources on
devices that practically never encounter blocked port 853. 
						
						
					 
					
						2020-10-29 13:22:19 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c93034ba7f 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: major cleanup  
						
						
						
						
					 
					
						2020-10-29 13:15:23 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b5cafdeb90 
							
						 
					 
					
						
						
							
							unbound: the mass file is not a good idea? cut it?  
						
						
						
						
					 
					
						2020-08-16 12:18:07 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							7541d93206 
							
						 
					 
					
						
						
							
							dns-over-tls.conf: update BlahDNS-JP addresses  
						
						
						
						
					 
					
						2019-12-01 12:48:02 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							10b1b8ad86 
							
						 
					 
					
						
						
							
							unbound/dot: fix outdated comment  
						
						
						
						
					 
					
						2019-11-03 00:49:19 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							7b2c1568d1 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: replace BlahDNS CH with FI  
						
						... 
						
						
						
						Shutting down on December 31th https://blahdns.com/  
						
						
					 
					
						2019-11-03 00:15:59 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							1e636a65af 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: enable BlahDNS over Yggdrasil  
						
						
						
						
					 
					
						2019-10-08 20:52:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							31aa6066b5 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: don't mention forwards.conf  
						
						... 
						
						
						
						I renamed it. 
						
						
					 
					
						2019-08-25 18:17:50 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							3dc273fbe0 
							
						 
					 
					
						
						
							
							unbound: mention other files of interest in dot & add threads  
						
						
						
						
					 
					
						2019-08-24 12:40:04 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							6274ed8e13 
							
						 
					 
					
						
						
							
							unbound/dot: add nic.cz & nixnet  
						
						
						
						
					 
					
						2019-08-24 12:02:26 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							5462af3059 
							
						 
					 
					
						
						
							
							unbound/dot: add Lelux.fi  
						
						
						
						
					 
					
						2019-08-24 11:57:42 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							7afaa57882 
							
						 
					 
					
						
						
							
							unbound/dot: add Snopyta  
						
						
						
						
					 
					
						2019-08-24 11:55:22 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							be7c4185eb 
							
						 
					 
					
						
						
							
							etc/unbound/dns-over-tls: comment Cloudflare  
						
						
						
						
					 
					
						2019-08-20 11:49:37 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							057d42bafd 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: fix typo  
						
						
						
						
					 
					
						2019-08-17 13:40:39 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							914fe1d26c 
							
						 
					 
					
						
						
							
							unbound/dot: finish adding providers  
						
						... 
						
						
						
						Ref: #15  
						
						
					 
					
						2019-08-17 13:37:02 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							410a02a968 
							
						 
					 
					
						
						
							
							unbound/dot: add securedns (both), dnswarden (adblock)  
						
						
						
						
					 
					
						2019-08-17 13:23:28 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							a5ccd88e70 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: add server locations  
						
						... 
						
						
						
						Ref: #15  
						
						
					 
					
						2019-08-17 12:34:03 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							601bd3ac86 
							
						 
					 
					
						
						
							
							unbound dot: alphabetical order  
						
						... 
						
						
						
						Ref: #15  
						
						
					 
					
						2019-08-17 00:52:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							39493f3bf9 
							
						 
					 
					
						
						
							
							unbound dot: move things around  
						
						
						
						
					 
					
						2019-08-17 00:26:36 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							b3a7266eb5 
							
						 
					 
					
						
						
							
							unbound.conf.d/dns-over-tls: remove Google  
						
						
						
						
					 
					
						2019-08-17 00:14:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							c78eecb547 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls: add two port 443 resolvers  
						
						
						
						
					 
					
						2019-08-17 00:10:32 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							222a030cee 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls: note version requirement 1.7.3  
						
						... 
						
						
						
						Debian 9 has 1.6.0 with which I am stuck for now. Debian 10 has 1.9.0 
						
						
					 
					
						2019-07-22 16:52:07 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							7b83f84633 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: add AdGuard DNS  
						
						... 
						
						
						
						I am surprised it actually works with DNSSEC validation enabled 
						
						
					 
					
						2019-07-22 16:12:09 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
							
						
						
						
							
						
						
							ffbbe9e522 
							
						 
					 
					
						
						
							
							unbound: replace forwards.conf with dns-over-tls.conf  
						
						... 
						
						
						
						Simultaneously rm puntcat, their DNS appears to be down at the moment
and I didn't find their own homepage. 
						
						
					 
					
						2019-07-22 16:05:05 +03:00