Hacker News new | ask | show | jobs
by ultrarunner 2600 days ago
DNS is a fundemental component of the internet. Currently, computers trust their upstream DNS servers to resolve correctly. Imagine if tpb resolves incorrectly on some networks. People on those networks may choose to use a different DNS server that resolves TPB correctly, but maybe has a grudge against Google and resolves an IP for Yahoo instead. Other DNS servers may have other grudges, or policies, or political pressures.

The end result is that DNS cannot be trusted, and so the design entirely breaks. Imagine ordering a package but not knowing if the delivery driver will see your address at your house or someone else’s.

This isn’t just removing something from the yellow pages, it’s introducing distrust into the phone system itself.

2 comments

As briefly mentioned in the article, SOPA proposed DNS-level blacklisting against copyright-infringing websites. But the fact that you are able to choose what DNS server you use almost guarantees that at some point someone would set up a DNS server outside of the US that would bypass these blocks anyways.

Savvy users could simply bypass a SOPA-enabled recursive DNS server by pointing their DNS settings to an off-shore recursive DNS server... What would happen to users if an infringer decided to setup a “free, non-SOPA” recursive DNS server for users to use – one that additionally hijacked legitimate banking, ecommerce and business websites, too? [1]

[1] https://dyn.com/blog/sopa-breaking-dns-parasite-stop-online-...

> Imagine if tpb resolves incorrectly on some networks.

It already does. DNS can’t be totally trusted now. Arguably it’s already broken.

Agreed. I can't see DNS not being redesigned at some point in the future. I really hope it will end up decentralized, but it could go either way.