Hacker News Reader

Comment by Demiurge | Hacker News Reader

Is this true? They claim that they don't keep any logs. Do you have a source?

They don't claim that. Less than a week ago HN discussed their top resolved domains report. Such a report implies they have logs.

From their homepage:

> How Quad9 protects your privacy?

> When your devices use Quad9 normally, no data containing your IP address is ever logged in any Quad9 system.

Of course they have some kinds of logs. Aggregating resolved domains without logging client IPs is not what the implication of "Quad9 is reselling the traffic logs" seems to be.

We're not discussing IP addresses, we are discussing whether their logs can leak your secret domain name.

Thats more clear, I get your point now. Again, though, that's not how most people would read the original comment. I've never even contemplated that I might generate some hostnames existence of which might be considered sensitive. It seems like a terrible idea to begin with, as I'm sure there are other avenues for those "secret" domains to be leaked. Perhaps name your secret VMs vm1, vm2, ..., instead of <your root password>. But yeah, this is not my area of expertise, nor a concern for the vast majority of internet users who want more privacy than their ISP will provide.

I am curious though, do you have any suggestions for alternative DNS that is better?

I use Google DNS because I feel it suits my personal theory of privacy threats. Among the various public DNS resolver services, I feel that they have the best technical defenses agains insider snooping and outside hackers infiltrating their systems, and I am unperturbed about their permanent logs. I also don't care about Quad9's logs, except to the extent that it seems inconsistent with the privacy story they are selling. I used Quad9 as my resolver of last resort in my config. I doubt any queries actually go there in practice.

Reply on news.ycombinator.com