AFAIK the only data is domain name, record and the incoming ip. I don't care if they store the first two.
Do you have any actual points against or are you just trying to nitpick? And do you have anything better?
Do you have any actual points against or are you just trying to nitpick? And do you have anything better?
Cloudflare is a for-profit corporation--you know, "duty to shareholders" and all that. We must assume, almost by definition, that they actually have their own self-interests at heart.
Other data that can be logged:
- timestamp - this can be very revealing when correlated with other datasets.j
- ASN - can sometimes act like fingerprint on it's own, and assists in correlating other data (e.g. the timestamp)
- any identifiable variation in the structure or behavior between different DNS resolver implementations. See nmap's "-O" option that detects the OS from the TCP/IP protocol implementation.