Root Canary Test Results - All ServFail [Red Crosses]

[JemTheWire]

That's for your browser isn't it? Root canary is different. IFAIK.

 

[JemTheWire]

Root Canary it back working again, well it is for me!. No more 'Servfail'

 

[MDM]

That's for your browser isn't it? Root canary is different. IFAIK.

No, not DoH in browser but DoT...

 

[MDM]

Root Canary it back working again, well it is for me!. No more 'Servfail'

I confirm, it works again! Same result as you.

 

[jerry6]

Use http://0skar.cz/dns/en/

thanks worked as expected

 

[jerry6]

I confirm, it works again! Same result as you.

notworking here i must have messed something up

 

[dave14305]

Using dnsmasq and Quad9.

 

[Gar]

View attachment 24481
Using dnsmasq and Quad9.

Is this 9.9.9.9 or 9.9.9.11?

 

[dave14305]

Is this 9.9.9.9 or 9.9.9.11?

.11 with ECS.

 

[Gar]

.11 with ECS.

Yes, same here. But .9 looks like other's results.

EDIT:
What are advantages/disadvantages?

 

[dave14305]

Yes, same here. But .9 looks like other's results.

EDIT:
What are advantages/disadvantages?

I actually think my Quad9 results aren’t ideal because I seem to think nobody is supposed to be validating MD5 or some of the other ones I’m green on. I think I read it somewhere, but can’t remember where (probably an RfC for DNSSEC).

Or do you mean advantages of .11 with ECS?

 

[Gar]

I actually think my Quad9 results aren’t ideal because I seem to think nobody is supposed to be validating MD5 or some of the other ones I’m green on. I think I read it somewhere, but can’t remember where (probably an RfC for DNSSEC).

Or do you mean advantages of .11 with ECS?

.11 w/ ECS

 

[Gar]

EDNS I guess

 

[dave14305]

.11 w/ ECS

I’m not sure, but I want whatever geo advantage I can get for streaming, when necessary.

 

[Bill Woodcock]

It's worth testing both ways and seeing how it works for you. Everybody's combination of local topology and traffic patterns are different enough that small changes in DNS configuration can yield surprising differences in performance.

The down-side of sending ECS is that it gives both CDN operators and anyone snooping traffic (typically between the recursor and the authoritatives, which much of it isn't encrypted) a better chance of figuring out who you are and logging your browsing history and monetizing it or putting it in a dossier.

The up-side is that if you're going to sites hosted on Akamai specifically, you may be directed to a slightly nearer server. An excellent paper quantifying all this was just published two days ago, in fact. For non-Akamai-hosted sites, ECS isn't going to get you a performance advantage on Quad9 or Cloudflare, but would get you almost-Quad9-like performance out of Google or OpenDNS. At the cost of some privacy.

 

[jerry6]

mine looks bad

https://rootcanary.org/test.html