Hacker News new | ask | show | jobs
by zdw 5187 days ago
Will you support DNSCurve? It would be nice to get more people on that particular bandwagon.

I set up a git/rake/djbdns/curvedns setup in an afternoon with a few VPS's, which has been quite solid for me.
3 comments
jevinskie 5187 days ago
How has curvedns been for you? I need DNSCurve for a research project of mine but I'm very frightened to see that curvedns is the only forwarding implementation and gdnsd is the only authoritative implementation. Speaking of implementations, what the heck do you use for a client/resolver!?
link
zdw 5186 days ago
That's the chicken/egg problem. The only real clients I've seen right now are the python testing implementation, OpenDNS's servers, and the DNSCrypt implementation that OpenDNS released: http://www.opendns.com/technology/dnscrypt/

Looking at one of my CurveDNS logs for the last few days and doing some very basic math:

    $ grep "query too small to be DNSCurve packet" *.s | wc -l
    27539

    $ grep "DNSCurve shared secret" *.s | wc -l
    2282

    2282/29821 = .07652
So about 7.6% of all DNS queries are being answered via DNSCurve. Doing reverse IP lookups on the querying servers, nearly all of these requests are coming from OpenDNS.

btw, gdnsd dropped DNSCurve support in recent builds, so it's only curvedns now.

link
vitalie 5186 days ago
At this moment we have no plans to adopt DNSCurve, but if we'll see more and more demands we may change our plans accordingly.
link
sigil 5187 days ago
If you took notes on your setup I'd be very interested.
link