Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is DNS safe again? #313

briandfoy opened this issue Feb 4, 2021 · 1 comment

Is DNS safe again? #313

briandfoy opened this issue Feb 4, 2021 · 1 comment


Copy link

briandfoy commented Feb 4, 2021

Verisign restored the DNS on Feb 2, but various servers may have cached values or may have sinkholed it.

I want to know if there are parts of the world that are still seeing different answers.

  • Thumbs up if you see the right results
  • Comment if you can see something different. Tell me where you are, roughly. Show me the result of dig +short.

Here's the good DNS, with addresses in 151.101/16:

$ dig

; <<>> DiG 9.10.6 <<>>
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9525
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

; EDNS: version: 0, flags:; udp: 1232
;			IN	A

;; ANSWER SECTION:		294	IN	A		294	IN	A		294	IN	A		294	IN	A

;; Query time: 50 msec
;; WHEN: Thu Feb 04 18:38:53 EST 2021
;; MSG SIZE  rcvd: 101

And here's the good WHOIS with name servers in *.BITNAMES.COM. It's back with Network Solutions now (Feb 5):

$ whois
   Domain Name: PERL.COM
   Registry Domain ID: 432086_DOMAIN_COM-VRSN
   Registrar WHOIS Server:
   Registrar URL:
   Updated Date: 2021-02-05T19:59:11Z
   Creation Date: 1994-08-16T04:00:00Z
   Registry Expiry Date: 2031-02-05T16:54:08Z
   Registrar: Network Solutions, LLC
   Registrar IANA ID: 2
   Registrar Abuse Contact Email:
   Registrar Abuse Contact Phone: +1.8003337680
   Domain Status: clientTransferProhibited
   Name Server: NS1.EU.BITNAMES.COM
   Name Server: NS1.US.BITNAMES.COM
   Name Server: NS2.EU.BITNAMES.COM
   Name Server: NS2.US.BITNAMES.COM
   Name Server: NS3.US.BITNAMES.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form:
>>> Last update of whois database: 2021-02-07T00:06:52Z <<<

You can also use dig to see the name servers a particular server is using. Here's Cloudflare, for example:

$ dig @ +short NS
@briandfoy briandfoy self-assigned this Feb 5, 2021
Copy link
Collaborator Author

DNS has been safe for awhile, so closing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
None yet
None yet

No branches or pull requests

1 participant