Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by arcticwombat | Hacker News Reader

Full thread

arcticwombat·

"Origin DNS Error" on the archive link.

View on HN

Let me guess, you're using Cloudflare DNS (1.1.1.1)?

Archive.is blocks Cloudflare DNS. You should switch to another DNS server if you want to use it.

Why?

> [...] Nameservers responsible for archive.is (ben.archive.is, anna.archive.is) are returning answers tailored to the IP address of the requestor [...]

From this thread https://community.cloudflare.com/t/archive-is-error-1001/182...

That's "how" not "why". Most major services tailor queries based on the source IP, for some reason when archive.is does it to cloudflare queries it's either broken or purposefully broken. At first I thought it might be something to do with 1.1.1.1 in the archive.is network but then I noticed cloudflare queries on behalf of clients don't even source from that IP.

See here: https://twitter.com/search?q=from%3Aarchiveis%20cloudflare&s...

Archive.is intentionally returns bad results to Cloudflare DNS, because Cloudflare don't send them the EDNS Client Subnet Header. Archive.is haven't said much about why, but what they have said appears to accord with this blog post: https://www.sajalkayan.com/post/cloudflare-1dot1dot1dot1.htm...

Apparently he discards requests from DNS servers that don't send EDNS in their requests: https://twitter.com/archiveis/status/1018691421182791680

Try this one: http://archive.fo/8uu5x

archive.fo gives me a SSL_ERROR_NO_CYPHER_OVERLAP error, consistently from that latest Firefox release. Might be a good idea to enable TLS1.0 on that site?

Reply on news.ycombinator.com