Another win by the French government. What will you do after November 24? What provider are you going to use? Why is Cloudflare immune to this? Maybe I'll switch to Wikimedia DNS.https://quad9.net/news/blog/au-revoir-france/
>>110158926Isn’t France on the brink of collapse?
>>110158950All of EU is really
lol is this the european freedom i suppose?
>>110158950We collapsed already. And fapping furiously as well.The sad part is that France is bowing down to muslims owned Bein sport network to block dns resolving.
I had to look this up. Why are courts attacking a free provider of fucking DNS provider in Switzerland and no one else? And over some fucking football streaming?
>>110158950in about a fortnite zister
>>110158994Freedumbs is an US meme, shit never applied to the rest of the world. Ever.
>>110159009It applied to the US?
>>1101589502 more weeks.
>>110159006>and no one elsebecause the other DNS block the sites that provide football streaming i would guess
>>110159009The irony of posting that in a thread on the French tickles my 'tisms.
>>110159144Google does but there's no evidence of Cloudflare doing this. French users should never use Google Public DNS.
>>110159026Critisism gainst the gov only. Act like a dipshit and you'll get jumped or shot
>>110158926>glow9
>>110159026Yes. Why do you think this site is hosted in the US?
>>110159211those sites were behind a cloudflare cdn. so instead of blocking those sites by dns, cloudlare blocked it thru its cdn.cloudflare cannot directly refuse a court order but just implement it differently. https://torrentfreak.com/vpns-and-cloudflare-escape-beins-e10000-a-day-piracy-blocking-penalties/>Canal+ was refused daily penalties of €50,000 per site, as the court concluded that Cloudflare only had to take reasonable measures, which it did by blocking through its CDN.
>>110159330So this is all a lie?https://www.cloudflare.com/transparency/
>>110158969>All of EU is reallyYeah? Like fuck it is.
>>110159356no, none of those canaries got broken.for what cf is doing, see https://cfl.re/h2-2025-transparency-report-legal
So, what do we use now?Also, is this the first step toward blocking Tor and I2P?
>>110159359Slava Urinals!
>>110159535AdGuard, Cloudflare, ControlD, DNSWatch, NextDNS, Nothing to hide, Uncensored DNS, Wikimedia DNS all offer unfiltered options. Cisco Umbrella/OpenDNS, Google Public DNS and Yandex are actively filtering for specific countries just like ISP's DNS. If you're not using DoH or DoT, then your DNS can be MITM'd/hijacked. Some providers don't even allow plaintext dns lookups.
>>110158926am i regarded? why is this?
>>110158950Collapse? Not yet. But things sure are shitty right now.
>>110159654>If you're not using DoH or DoT, then your DNS can be MITM'd/hijacked.we can also hijack your doh or dot request, we have emudhra's intermediate certificate now to sign anything.
>>110159737We?
>>110159746Are you going to have another sperg out over the usage of that word? We are smarter than you. Yes. You are not entitled to an explanation of who/what we is every time it is said. All you need to know is that we means more than one person, or an organization.
>>110159654Honestly the reason I use quad9 is because it doesn't block the russian mp3 websites.
>>110159706>why is this?Hooked nosed politicians use mudslimes as an excuse to turn the country more and more into a dictatorship, so whites are mad at the mudslimes, not mad at the hooked nosed politicians. They've been doing this for at least forty years and it works so well.>>110159737>we
>>110159654By the way some dns providers only have servers in a few locations. So you will not always get an optimal path for cdns (unless they pass on ecs containing your ip subnet...some cdns only accept this from Google Public DNS anyway). If you want the equivalent of Quad9's malware option, there is 1.1.1.2.This can also make your system sync time from a further location because of geodns. So if you're on Linux (and set the dns at operating system level, not just in a web browser), you may well be using the ntp pool. You'll have to change your time daemon config to your country code (by default Linux will use vendor names like debian or fedora in the url, which will be geodns):https://www.ntppool.org/en/use.html(by the way your NTP is plaintext...you should switch to a time daemon and trusted time server supporting Network Time Security)
>>110158926>beINOh, so it's the football industry going after them for illegal streaming, not France specifically.BeIN is owned by qataris.
>>110159757>WeWHO THE FUCK ARE YOU GUYS
>>110159827>BeIN is owned by qataris.As mentioned in the blog post.
>>110159737Those certificates are removed now if they've updated ca-certificates or manually took them out. There is an element of trust with any service. It's still got to be a lot better than letting the router use the ISP's slow dns servers. Aside from privacy, it's just useful for filtering cancer like gambling and porn.
what should i use instead
>>110159912Any of these >>110159654 or make your own.
>>110159535Snowflake and VPN bootstrap will be the future if that becomes an issue.
>>110158994Europeans don't have freedom.
>>110160074US doesn't have freedom. You can say nigger and faggot at work with your bros in Europe. You can be a leftard or a hitler wannabe and have debates at lunch. In the US if anyone even so much as suspects you're not a leftard, even in your private anonymized life, you're getting unpersonned.UK and germany are their own problem, they're not "europe".
I'm french and unsure of what DNS to use. For now I'm on Adguard but I've used quad9 in the past. France also has problems with GrapheneOS, has suggested banning social medias during protests and banning VPNs after forcing age verification everywhere. That at the same time where there are dataleaks and hacks literally everyday
>>110160113If people are using Quad9, then it's obvious they don't trust Cloudflare, Google and OpenDNS. So next up will be the smaller providers who potentially cannot handle the influx of Frenchies come the end of November, nor will they be able to fight legal action. Eventually everything will just block France. Total blackout.
>>110160174All of this because of a few darkies playing with a ball...
>>110160104You have no idea what you're talking about. In the US, you are free to express your thoughts and opinions legally speaking. The fact that some people disapprove of something doesn't mean you don't have the right.In the EU, you can literally get time for Japanese pencil drawings or no-no symbols.
>>110160301The point is the US soiciety is so polarized that there will be heavy consequences from speaking your mind freely if you trigger trannies
>>110160321Literally doesn't happenTrannies have no political power
>The good news is the court significantly reduced the financial penalty, from €580,000 to €1,000 per day. However, for Quad9, this has never been just a financial issue: it is a matter of principle.
>>110158994Yes. >>110158926>Why is Cloudflare immune to this?Probably the French government uses them, also half the web uses them. It would be really funny to see half the web just disappear overnight in France.
>>110160321Okay, but that has nothing to do with your rights. The same thing happens everywhere else, people are just retarded about other things than amerilards.In Europe, you get the same shit from people except you can get in very real legal trouble for saying certain things too. The latter part is a lot more seriously problem than the former and is what is meant by "having no freedom".
>>110160332Social power dumbass. I vividly rememeber them going after catering businesses that refused to make cakes for gay weddings.
>>110159706>whyIf only the answer was one click away...
>>110160382> It would be really funny to see half the web just disappear overnight in France.that happens every weekend in spain when there's a football match and all of cloudflare gets blocked.https://hayahora.futbol/
>>110160468this is fucking deranged
>>110160488Beyond deranged.>>110160468Why don't they just issue proper notices to Cloudflare? Cloudflare complies with legal notices properly served to them, they don't need to block Cloudflare they just need to serve them proper notices.It's almost as if they have a bunch of shit automated tools doing the blocking and don't want any transparency or accountability.
>>110160468After watching the World Cup this summer I am convinced that anyone watching football is below a drooling retard. Shit was so obviouslt fixed with judges trying to position argentina into another victory with that drama queen messi at the helm
>>110160525>I am convinced that anyone watching football is below a drooling retard.You'd be correct.
>>110160525That's because FIFA has some retarded mandate to include referees from Africa and Latin America.If they stuck to European referees where the standard is much, much higher (don't get me wrong they're not perfect but still top of their game compared to others) then that wouldn't happen.There's a reason FIFA's nickname is ArgenFIFA. The sport isn't the problem, it's the governing body that needs to change.UEFA isn't scandal free but way more respectable than FIFA. It's a joke that Infantino still insists he has the backing of world governing bodies. He needs to go already.
>>110160514>Why don't they just issue proper notices to Cloudflare? Cloudflare complies with legal notices properly served to them, they don't need to block Cloudflare they just need to serve them proper notices.that's an unwinnable game of whack-a-mole. right holders would have to actively look for pirate streams which would constantly rotate their sites.right holders only care about their own profits and not about any collateral damage for banning cloudflare wholesale.
>>110158950until certain richfags are running out of the country no
>>110160681Yeah, they have to actually do their job. Unplugging the Ethernet cord to the Internet is simple and effective I suppose.
>>110160696do their job? the pirates aren't in the eu, spain will never be able to arrest the pirates.
>>110160525There are freaking huge amounts of money behind soccer. In USA you have football, prowrrestling, basketball and baseball, in Europe there is only soccer and nothing else.And you can't even imagine how europeans are crazy about soccer. It's not even funny, it's weird and sad, they just totally lose their mind over it. I've seen best friends suddenly becoming enemies and punching each-other because their two fav teams were to have a match, no kidding. And of course, after every single match, no matter who wins or lose, monkeys chimp out everywhere and burn everything.
>>110160301In EU, both legally and practically (i.e. socially) you can say whatever the fuck. In some countries the only exception is don't say you like nazis or hitler did nothing wrong, but in practice nothing will happen even if you do that.In the US you will get cops knocking on your door if you say you want to kill yourself, and you will be unpersonned if you make the slightest hint that you don't like trannies.This is fact. Even the government will go after you and you'll fight for years before winning, ruining your life.It doesn't matter how much cope you want, the idea of US freedom has always been fake propaganda from the anti-commie days because US actually had nothing at all to offer over commie countries until the commies self-destructed. It was their attempt to brain drain them as a cold component to the war. That work amazingly. Boomers inland, however, fell for it hook line and sinker as well.>>110160390"I have freedom because if I speak my mind I will be shot dead on the spot. Europeans do not have freedom because they can say what they want free of consequences".Do you understand? What the laws say or don't comment on do not matter at all. What matters is what happens day to day. What you can do and what you can not do. That is the definition of freedom. There is no law in the EU that says "freedom is not allowed".
>This decision in favor of beIN forces Quad9 to block the recursive DNS resolution for a number of domain names for users located in France. Har har har. Of course it had to be about illegal sports streaming. Goddamn euro boomers I swear.
>>110158926>paying to watch someone kick a ball around while earning millions
>>110158926
>>110160828why of course? it's not the first thing that comes to mind.
>Saudis using the french legal system to subvert the entire nationKinda poetic desu
Even Wikimedia does not trust Quad9.
>>110160926Qataris have owned france for decades, nothing really new here. They also control the banks and the media and shit.
>>110160938Because (You) trust Wikimedia?
>>110160924We had attempts at a hard push for anti-piracy laws in the late 2000s (HADOPI) in France that was fueled by our beloved manlet president of the time from the pressure of our equivalent of hollywood companies.It got passed, we had a weird system for a while where if you get caught pirating you're subject to a 3 strike system and after 3 infractions your internet access gets cut off and you're not allowed to find a new ISP. Fast forward a decade after they busted a bunch of torrents sites hosted in Morocco or Algeria and with the advent of Netflix as a service then piracy naturally dropped. They cancelled most of that insanity around late 2010s.Anyway point being in the same period and with the advent of covid, sports streaming sites broadcasting paid content became extremely popular out of nowhere. I'm talking like 240p streams with ads absolutely everywhere on screen but at least the average normalfag (including my dad) could watch the Women's Tour de France for free.It's hilarious because those issues are so insignificant in the grand scheme of things but always pushed by big media corps. Of which I'll remind you I'm pretty sure half of all our sports teams and channel coverage are owned by an peninsular Arab nation.
>>110160926??saudis are the ones pirating streams. this is a loss for them.qataris, who own the sports, won.
>>110160991I'd rather trust a non-profit organization than corporate Cloudflare that wants full control of the internet.
>>110160947>They also control the banks and the media and shit.Ah, yes. Qataris.
>>110160938>Cloudflare's DNS service for families has been caught blocking LGBTQ contentummm, based?
>>110161006>trust a non-profit organizationWikilaundering.
>>110161006makes no sense.quad9 is already a non-profit.
>>110161015Yes. Amerilards (who are fully jew controlled) have this weird idea that the whole world works the same way their shithole does. That is not the case.
>>110161040Quad9 is sponsored by the City of London police.
>>110160814That's a lot of words for trying to cope with not having first amendment rights and trying to make it out as something that's not important to ease the mental dissonance.
>>110158950no
>>110161070Your Mom is sponsored by Pornhub. She's still a non-profit
>>110161070Is ControlD in the clear? Bros?
>>110159746consult picrelated instruction once, then every other "wespeak" will be clear--so those dudes were serving qatari retards and now proudly refused. whata circus. better now than never though.
>>110161070wikimedia "founder" walked out of an interview after being asked about his co-founder.https://www.youtube.com/watch?v=uswRbWyt_pgyou think wikimedia cares about the truth?
>>110161129They're for profit and heavily encourage using a paid service.
Imagine not using your own recursive dns
>>110158950yes
>>110161086I move to EU from US. I lived in NYC. It was a massive culture shock to be allowed to say what I think without consequences, it took me over a year to adapt. During that time I noticed I was constantly on edge about if a word would trigger something from someone, because that's how it has been in my entire professional career. But no. Here I am genuinely free. I do what I want and say what I want when I want it. I'm no longer free to be cattle, or free as in free to be unpersonned.
>>110161229this shit is plain text no?
>>110159356>3. [...] feed [...]Oh, they host XKeyscore on premise then
>>110161229It's better for performance to use forwarders even if you're running your own recursive resolver.
>>110161267yes, dns queries to nameservers are clear text. your french isp can easily mess with it.
>>110161282This, by the way is why Quad9 refuses to serve bad responses that would break or violate DNSSEC.It is very common for some organisation to configure something like Bind9 for internal DNS of some sort and then point it at something like Quad9 to do DNS for other zones.It is vitally important to preserve this and not spoof or falsify anything just because the French courts want them to.
>>110161255I agree that the average European will probably not give a shit about what other people say, and American customers are a lot more likely to shit and piss themselves in a random meltdown. But this is more of a cultural difference.I'm from Europe, and I can see how systems here have been curtailing freedom of speech, and there is literally nothing to protect people from it, unlike in the US. It's not a fundamental right here, and we've seen what that can lead to. I'd choose the US system every time.
>>110161353Maybe because you've never lived in the US so you don't understand how bad that is. Couple that with how in the US, the authorities are in the habit of disregarding the law when it pleases them, especially since they know that you won't be able to fight it without going bankrupt and destroying your entire life - if you even get far enough through these sacrifices to conclude the court circus show. There are plenty of examples of people who got jailed for life for having the wrong opinion in the US despite supposed freedom of speech.
>>110161345wrong, dnssec is shit and should be ignoredhttps://sockpuppet.org/blog/2015/01/15/against-dnssec/>All secure crypto on the Internet assumes that the DNS lookup from names to IP addresses are insecure. Securing those DNS lookups therefore enables no meaningful security. DNSSEC does make some attacks against insecure sites harder. But it doesn’t make those attacks infeasible, so sites still need to adopt secure transports like TLS. With TLS properly configured, DNSSEC adds nothing.>DNSSEC’s real job is thus to replace the TLS CA system. This plan is called DANE.>TLS CAs do need to be replaced. But it’s hard to imagine a worse replacement than DANE.
>>110161394This is the dumbest opinion ever after eMudhra.DNSSEC doesn't use the CA system to secure its responses. It's very different to that flawed system that breaks everything just because an intermediary decided to use the fucking number 4 as their private key.Security requires depth. Yes, you need to secure the transport but you need to secure the lookups for your server too. If you don't do DNSSEC then nobody has any reliable way to prove that DNS requests/responses to your site haven't been falsified.
>>110161188This is a skit, right? even his own wikipedia page lists him as co-founder
>>110161425no resolver will ever enforce dnssec.resolvers will just drop dnssec validation if someone yet again messed up the unneeded complex dnssec signing.https://www.cloudflarestatus.com/incidents/vjrk8c8w37lz>May 6, 2026, 12:37 AM GMT+2>The issue has been identified as a DNSSEC signing problem at DENIC, the organization responsible for the .DE top-level domain. Cloudflare has temporarily disabled DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems at DENIC are known to have been resolved.
>>110161480Public resolvers maybe, if you're running your own validating resolver then that is the one doing the validation though.Really, that is the way DNSSEC is supposed to be done. It doesn't mean much if the upstream resolver is validating it, your client device has to validate it in its stub resolver too.I can totally understand Cloudflare's position here given there may be users in Germany that would still quite rightfully want to resolve those names.
>>110161513what are you doing with all those sites that don't use dnssec to sign their domain records?public resolvers only validate dnssec if there's something to validate but will not fail if there's no dnssec.
>>110161583Nothing. You can't secure something that's unsecured but the point is that if something is signed then Quad9 should return the original data. They shouldn't be forced to break the signature and deliver bogus data just because a court orders them to.Imagine if a court, for example, ordered a network operator to man-in-the-middle a https:// website triggering security warnings in browsers. Would that be acceptable? No, of course not.Piracy enforcement should be targeted at the source. I emphatically agree with Quad9's position here. Nobody should be forced to serve bogus data.
>>110161621And to be clear, I know they will deliberately break DNSSEC with their malware/security feed, that's expected as part of the service but they also have resolvers that don't do any filtering at all and they should be allowed to continue that.
>>110161637Is not answering the query somehow not an option?
>>110161656Not giving an answer is still giving an answer. That's what NXDOMAIN is and what other resolvers in France have done. But with DNSSEC you can actually do a "proof of non-exitence" which fails if you're serving bogus responses like that.Essentially, the best way to comply whilst keeping their principles in tact is to do what they're doing. Fuck you France, goodbye.
>>110161674Yes, I know signed not found is a thing. I meant why simply not responding isn't viable. Yes, you then infer that the record exists, but that won't help you to connect.
>>110160938LMAO
>>110161705It's an option to comply with the court, yes. Principally though you're still serving bogus data you shouldn't be. It's a slippery slope and I applaud them for taking a stance here when it would be so easy to not do that and simply comply with the order.Unfortunately, they can't target the NXDOMAIN blocking just at France, it would have to be worldwide, because VPNs exist and courts are retarded.So their options are:>Comply with the order worldwide for everyone and block the requested domains with NXDOMAIN>Pull out of the French market entirely (VPNs still exist of course but with them not being accessible in France then they won't have any jurisdiction over them anymore)
>>110160938It's important to note that Wikimedia runs their DNS primarily for themselves first and foremost, as a public service secondarily.For them, they have valid reasons to ensure it is properly secured as it is used on their infrastructure.
>>110159359ruskibros............ GEEEEEEEEEEEGGGGGGGGGGGGGGGGG WHAT IS THIS
>>110159005how bad is it really?
>>110160113use your own recursive dns that just gets everything from the root severs
>>110161621>Imagine if a court, for example, ordered a network operator to man-in-the-middle a https:// website triggering security warnings in browsers. Would that be acceptable? No, of course not.??of course that's acceptable. we, the people, entrusted courts with that.https://www.law.cornell.edu/uscode/text/18/3121
>>110161674>That's what NXDOMAIN is and what other resolvers in France have donewronghttps://developers.google.com/speed/public-dns/blocking>In the event of a block, we will communicate this explicitly in the query response. The response returned will have DNS RCODE REFUSED, optionally with an extended DNS error 16 (Censored).
>>110160104Is debating politics with your coworkers your own personal measure of freedom?
>>110161818If it comes from the government you really have no choice but to comply and you may not even be able to tell people you did it.That's a bit different from a common court ordering such things.
>>110159359shithole EU is done in 10 years.
>>110161834Interesting that Google has a specific way to communicate that censorship.I know of at least one resolver that using NXDOMAIN in such a way though.
>>110161843read the actual lawhttps://www.law.cornell.edu/uscode/text/18/3121>Except as provided in this section, no person may install or use a pen register or a trap and trace device without first obtaining a court order under section 3123 of this title or under the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) or an order from a foreign government that is subject to an executive agreement that the Attorney General has determined and certified to Congress satisfies section 2523.those are the only exceptions. there's always a court involved. even NSA needs that FISA court stamp.
Remember using OpenDNS on my Xbox 360 back in the day because it was faster than my shitty ISP. They were late to the game with DoT and DoH. Someone using a dynamic IP could have blocked loads of domains in their account and now when you use OpenDNS as an unregistered user, those domains will still be blocked? It also hijacks blocked pages unless you use their sandbox version.
>>110161900Yes, it's the person/entity asking the court that matters though.They aren't going to answer to Muslim Sports distribution company.
>>110161840No, it's a barometer of it. If I can't even say words then how can I possibly expect anything at all?
>>110161940You can say whatever you want if you have the money to handle getting fired. I have nothing to gain by saying racist shit at work. I am also independently wealthy so it's a non starter
>>110159009Hey ESL, you can't use an before US. It goes before words with vowel sounds, not necessarily before all vowels. US as an initialism sounds like Yoo Ess, so an before it sounds wrong. An before United States also doesn't work because the first syllable of United has that "Yoo" sound.
>>110162050I accept your potent self-pwn as a surrender.
>>110161908>le IR coupledropped
