Hacker News Reader

Wouldn't it be easy for cloudflare and other ~~WHOIS~~ DNS providers to just not propagate the .zip domain?

Isn't it time to leverage what's left of the decentralisation of the web rather than beg google?

I think you meant DNS, not WHOIS.

That's probably worse than the alternative: I don't think we want a world where the person in accounting can resolve hxxps://financialstatement.zip and the person triaging it in IT can't.

I did mean DNS, thanks, been a long week.

Why rely on third parties? Setting up your own recursive DoH server with the appropriate settings (PiHole etc) is super easy.

It's even free if you use the free forever VPS server Oracle will give you. The uplink being limited to 50mbps isn't an issue for DNS (and similar lightweight protocols).

I'd recommend putting the DNS behind a secret subdirectory though, because my server accidentally got added to a DNS server list and a small country started querying mine at about 30k per second

Publicly accessible DNS resolvers are an awful idea. Don't do it.

Why? As long as you don't allow UDP protocols so you don't become part of a DDoS botnet it's just a lookup service.

Reply on news.ycombinator.com