Remix.run Logo
▲ drdexebtjl 2 hours ago

I don’t want the user to see the error, I just want the browser/the operating system’s resolver to not be a stub resolver, and actually ask the authoritative servers when something like this fails on a non-authoritative response.

Public DNS like Quad9 should be a cache (because recursing is pretty slow) and, at most, a way to find the IPs of the root name servers.

Courts asking non-authoritative resolvers not to resolve a name should have no effect on clients successfully resolving that name, such that they wouldn’t even have a reason to go after Quad9 or Alice and Bob, and would have to go after the TLD registry (likely in a different jurisdiction).

▲Bender 15 minutes ago | parent [-]

The only thing I know of that operates somewhat like you are asking is Unbound itself, when it is not the server doing the root/tld lookups. One can configure Unbound with a series of Upstream DoT servers and it can retry each of them and cache which ones answered, answered fastest, so if the upstream just refused to answer that would cause it to move to another upstream resolver and eventually retry the one that refused but once it gets another refusal it would avoid that one again for some time. Clunky but it would sortof work.

Beyond that I think you are asking for behavioral and RFC changes to everyone's workstations, cell phones, tablets, TV's, and DNS resolvers.

▲drdexebtjl a minute ago | parent [-]

[delayed]