#dot — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #dot, aggregated by home.social.
-
https://www.europesays.com/ch-fr/145053/ Prince William – Une nonagénaire lui fait des avances, il répond avec humour : « On trouvera un arrangement » #avances #Celebrities #Celebrity #Divertissement #dot #Entertainment #Humour #îlesScilly #nonagénaire #People #PrinceWilliam #Suisse #visite
-
https://www.europesays.com/be-fr/117499/ Prince William – Une nonagénaire lui fait des avances, il répond avec humour : « On trouvera un arrangement » #avances #BE #BEFr #Belgique #Belgium #Celebrities #Celebrity #Divertissement #dot #Entertainment #Humour #îlesScilly #nonagénaire #people #PrinceWilliam #visite
-
Estava colocando Pokémon em dia e me deparei com um Ditto transformado no Capitão Pikachu que não transformou o rosto, assim como o Ditto da Duplica fazia.
Me pergunto se esse será o novo padrão dos Dittos (já que isso ficou popular) ou se esse da imagem também será peculiar dentro da história.
#Pokémon #PocketMonsters #PokémonHorizons #PokémonHorizontes #Ditto #Pikachu #CapitãoPikachu #CaptainPikachu #Liko #Roy #Dot #Friede #Ult
-
autoshop
-
freeway mural
-
#ODOSTOMIA #IRAFCA aepiot.com?q=ODOSTOMIA%... #DOT #COM #BUBBLE aepiot.com?q=DOT%20COM%... aéPiot - MultiSearch Tag Explorer: aepiot.ro
MultiSearch Tag Explorer -
#ODOSTOMIA #IRAFCA aepiot.com?q=ODOSTOMIA%... #DOT #COM #BUBBLE aepiot.com?q=DOT%20COM%... aéPiot - MultiSearch Tag Explorer: aepiot.ro
MultiSearch Tag Explorer -
Still thinking about #DNS privacy. I have a validating resolver that does DNS-over-HTTP #DoH and DNS-over-TLS #DoT. So that solves the client-to-server security.
But the server has to get the data from somewhere and that's generally via recursion starting at the root servers. Those servers don't widely use DoT, so the queries tend to be in the clear which means my ISP can see them.
I could shuttle the queries to Cloudflare or Quad9 using DoT, but then I'm just changing my exposure from my ISP (who I generally trust) to someone who promises I can trust them (spoiler alert: I don't).
To address that gap, I built tord. This is a VPP-integrated Tor service that I adjusted
dnsdto optionally use as a forwarder. So I can set9.9.9.9as my target forwarder and havednsduse thetordcircuit to pass the requests so that my IP address remains private. The forwarded requests themselves are DoT, so the Tor exit node can't read them.It works pretty well! There's a slightly noticeable delay when visiting a non-cached name for the first time, but that quickly smooths out.
-
Still thinking about #DNS privacy. I have a validating resolver that does DNS-over-HTTP #DoH and DNS-over-TLS #DoT. So that solves the client-to-server security.
But the server has to get the data from somewhere and that's generally via recursion starting at the root servers. Those servers don't widely use DoT, so the queries tend to be in the clear which means my ISP can see them.
I could shuttle the queries to Cloudflare or Quad9 using DoT, but then I'm just changing my exposure from my ISP (who I generally trust) to someone who promises I can trust them (spoiler alert: I don't).
To address that gap, I built tord. This is a VPP-integrated Tor service that I adjusted
dnsdto optionally use as a forwarder. So I can set9.9.9.9as my target forwarder and havednsduse thetordcircuit to pass the requests so that my IP address remains private. The forwarded requests themselves are DoT, so the Tor exit node can't read them.It works pretty well! There's a slightly noticeable delay when visiting a non-cached name for the first time, but that quickly smooths out.
-
Still thinking about #DNS privacy. I have a validating resolver that does DNS-over-HTTP #DoH and DNS-over-TLS #DoT. So that solves the client-to-server security.
But the server has to get the data from somewhere and that's generally via recursion starting at the root servers. Those servers don't widely use DoT, so the queries tend to be in the clear which means my ISP can see them.
I could shuttle the queries to Cloudflare or Quad9 using DoT, but then I'm just changing my exposure from my ISP (who I generally trust) to someone who promises I can trust them (spoiler alert: I don't).
To address that gap, I built tord. This is a VPP-integrated Tor service that I adjusted
dnsdto optionally use as a forwarder. So I can set9.9.9.9as my target forwarder and havednsduse thetordcircuit to pass the requests so that my IP address remains private. The forwarded requests themselves are DoT, so the Tor exit node can't read them.It works pretty well! There's a slightly noticeable delay when visiting a non-cached name for the first time, but that quickly smooths out.
-
Still thinking about #DNS privacy. I have a validating resolver that does DNS-over-HTTP #DoH and DNS-over-TLS #DoT. So that solves the client-to-server security.
But the server has to get the data from somewhere and that's generally via recursion starting at the root servers. Those servers don't widely use DoT, so the queries tend to be in the clear which means my ISP can see them.
I could shuttle the queries to Cloudflare or Quad9 using DoT, but then I'm just changing my exposure from my ISP (who I generally trust) to someone who promises I can trust them (spoiler alert: I don't).
To address that gap, I built tord. This is a VPP-integrated Tor service that I adjusted
dnsdto optionally use as a forwarder. So I can set9.9.9.9as my target forwarder and havednsduse thetordcircuit to pass the requests so that my IP address remains private. The forwarded requests themselves are DoT, so the Tor exit node can't read them.It works pretty well! There's a slightly noticeable delay when visiting a non-cached name for the first time, but that quickly smooths out.
-
Still thinking about #DNS privacy. I have a validating resolver that does DNS-over-HTTP #DoH and DNS-over-TLS #DoT. So that solves the client-to-server security.
But the server has to get the data from somewhere and that's generally via recursion starting at the root servers. Those servers don't widely use DoT, so the queries tend to be in the clear which means my ISP can see them.
I could shuttle the queries to Cloudflare or Quad9 using DoT, but then I'm just changing my exposure from my ISP (who I generally trust) to someone who promises I can trust them (spoiler alert: I don't).
To address that gap, I built tord. This is a VPP-integrated Tor service that I adjusted
dnsdto optionally use as a forwarder. So I can set9.9.9.9as my target forwarder and havednsduse thetordcircuit to pass the requests so that my IP address remains private. The forwarded requests themselves are DoT, so the Tor exit node can't read them.It works pretty well! There's a slightly noticeable delay when visiting a non-cached name for the first time, but that quickly smooths out.
-
I'm experimenting with DNS security this weekend. While plaintext DNS over 53/udp is still ubiquitous, there are two decent options that have been developed to provide security of that data in transit: DNS-over-TLS and DNS-over-HTTPS.
The latter is likely the more widely used; modern browsers have the capability to specify DNS-over-HTTPS and natively circumvent a potentially insecure local resolver. DNS-over-TLS is older (as I understand it) and I've found support more rare. But I have been able to use it on Android with a manual setting.
I've added #DoT and #DoH capabilities to my WIP VPP-native #dnsd caching recursor. I also added the ability for the daemon to seamlessly request and provision TLS certificates from LetsEncrypt using #TLSALPN01. No messing around with DNS records or secondary HTTP servers - just set some configuration options and a public address and it handles the rest.
So far I have the software serving my Firefox browsers using DoH, my Android phone using DoT, and my Windows laptop at a system level using DoH. I thought my Macs would be the easiest because they generally have been about #IPv6 and RAs. But from what I can see, they have some outdated requirements for automatic provisioning (i.e., providing the TLS domain name in the message isn't enough; TLS also needs to include SAN records for the IP addresses) that have proven intractable so far with my tech stack. To be fair, none of the other systems configure this automatically either. But I have come to expect more from my Macs.
Regardless, I added several record types in sfw and dhcpd to facilitate automatic assignment when the systems support it.
> dnsd-query stats { "type": "stats", "queries_udp": 644, "queries_tcp": 0, "queries_dot": 76, "queries_doh": 188, "cache_hits": 127, "cache_misses": 775, "forwarder_matched": 0, "recursion_walked": 534, "rrl_dropped": 0, "acl_denied": 0, "dns64_synthesised": 100, "dnssec_validated": 64, "dnssec_failed": 0, "udp_inflight_shed": 0 } -
Many changes! Shipping STABLE @nlnetlabs Unbound QUIC builds aside our non QUIC variant&our cutting-edge canary builds soon! The supported architectures have been ramped up too: ppc64le, s390x, riscv64 joined the party. No own unbound.conf anymore, now we're just patching the needed #recursor settings at buildtime.
Test driving our builds verifies everything is nice. 💚
https://github.com/madnuttah/unbound-docker
#DNS #DNSSEC #DoT #DoH #QUIC #HTTP3 #Unbound #FOSS #SelfHosting #Homelab #Privacy #Security #ci #cd
-
Many changes! Shipping STABLE @nlnetlabs Unbound QUIC builds aside our non QUIC variant&our cutting-edge canary builds soon! The supported architectures have been ramped up too: ppc64le, s390x, riscv64 joined the party. No own unbound.conf anymore, now we're just patching the needed #recursor settings at buildtime.
Test driving our builds verifies everything is nice. 💚
https://github.com/madnuttah/unbound-docker
#DNS #DNSSEC #DoT #DoH #QUIC #HTTP3 #Unbound #FOSS #SelfHosting #Homelab #Privacy #Security #ci #cd
-
Many changes! Shipping STABLE @nlnetlabs Unbound QUIC builds aside our non QUIC variant&our cutting-edge canary builds soon! The supported architectures have been ramped up too: ppc64le, s390x, riscv64 joined the party. No own unbound.conf anymore, now we're just patching the needed #recursor settings at buildtime.
Test driving our builds verifies everything is nice. 💚
https://github.com/madnuttah/unbound-docker
#DNS #DNSSEC #DoT #DoH #QUIC #HTTP3 #Unbound #FOSS #SelfHosting #Homelab #Privacy #Security #ci #cd
-
Many changes! Shipping STABLE @nlnetlabs Unbound QUIC builds aside our non QUIC variant&our cutting-edge canary builds soon! The supported architectures have been ramped up too: ppc64le, s390x, riscv64 joined the party. No own unbound.conf anymore, now we're just patching the needed #recursor settings at buildtime.
Test driving our builds verifies everything is nice. 💚
https://github.com/madnuttah/unbound-docker
#DNS #DNSSEC #DoT #DoH #QUIC #HTTP3 #Unbound #FOSS #SelfHosting #Homelab #Privacy #Security #ci #cd
-
Many changes! Shipping STABLE @nlnetlabs Unbound QUIC builds aside our non QUIC variant&our cutting-edge canary builds soon! The supported architectures have been ramped up too: ppc64le, s390x, riscv64 joined the party. No own unbound.conf anymore, now we're just patching the needed #recursor settings at buildtime.
Test driving our builds verifies everything is nice. 💚
https://github.com/madnuttah/unbound-docker
#DNS #DNSSEC #DoT #DoH #QUIC #HTTP3 #Unbound #FOSS #SelfHosting #Homelab #Privacy #Security #ci #cd
-
https://www.europesays.com/ch/66245/ New Bern intersection to undergo construction next week #Bern #construct #Construction #CravenCounty #DepartmentOfTransportation #dot #DrMartinLutherKingJrBoulevard #DrMlkBoulevard #driver #drivers #HotelDrive #intersection #lane #lanes #MLK #nc #ncdot #NorthCarolina #NorthCarolinaDepartmentOfTransportation #Phase #Project #week #WITN
-
Точка в дизайне: как самый маленький элемент задаёт настроение и ритм
Точка — самый простой элемент дизайна. И один из самых недооценённых. Рассказываем, как точки работают в интерфейсном, графическом и веб-дизайне на примере цифровых продуктов «Северстали». Больше о точках 📍
https://habr.com/ru/companies/severstal/articles/1035524/
#ux_design #ux_дизайн #ux #пользовательские_интерфейсы #пользовательский_опыт #figma #figma_design #точка #dot #illustrator
-
Точка в дизайне: как самый маленький элемент задаёт настроение и ритм
Точка — самый простой элемент дизайна. И один из самых недооценённых. Рассказываем, как точки работают в интерфейсном, графическом и веб-дизайне на примере цифровых продуктов «Северстали». Больше о точках 📍
https://habr.com/ru/companies/severstal/articles/1035524/
#ux_design #ux_дизайн #ux #пользовательские_интерфейсы #пользовательский_опыт #figma #figma_design #точка #dot #illustrator
-
Точка в дизайне: как самый маленький элемент задаёт настроение и ритм
Точка — самый простой элемент дизайна. И один из самых недооценённых. Рассказываем, как точки работают в интерфейсном, графическом и веб-дизайне на примере цифровых продуктов «Северстали». Больше о точках 📍
https://habr.com/ru/companies/severstal/articles/1035524/
#ux_design #ux_дизайн #ux #пользовательские_интерфейсы #пользовательский_опыт #figma #figma_design #точка #dot #illustrator
-
Точка в дизайне: как самый маленький элемент задаёт настроение и ритм
Точка — самый простой элемент дизайна. И один из самых недооценённых. Рассказываем, как точки работают в интерфейсном, графическом и веб-дизайне на примере цифровых продуктов «Северстали». Больше о точках 📍
https://habr.com/ru/companies/severstal/articles/1035524/
#ux_design #ux_дизайн #ux #пользовательские_интерфейсы #пользовательский_опыт #figma #figma_design #точка #dot #illustrator
-
Pete Buttigieg, Duffy’s predecessor at the DOT, also weighed in on the controversy. "This is brutally out of touch: a Trump Cabinet member making a documentary about himself while regular families can’t afford road trips anymore, because Trump and his war put gas prices through the roof.".
-
Pete Buttigieg, Duffy’s predecessor at the DOT, also weighed in on the controversy. "This is brutally out of touch: a Trump Cabinet member making a documentary about himself while regular families can’t afford road trips anymore, because Trump and his war put gas prices through the roof.".
-
Pete Buttigieg, Duffy’s predecessor at the DOT, also weighed in on the controversy. "This is brutally out of touch: a Trump Cabinet member making a documentary about himself while regular families can’t afford road trips anymore, because Trump and his war put gas prices through the roof.".
-
Pete Buttigieg, Duffy’s predecessor at the DOT, also weighed in on the controversy. "This is brutally out of touch: a Trump Cabinet member making a documentary about himself while regular families can’t afford road trips anymore, because Trump and his war put gas prices through the roof.".
-
Pete Buttigieg, Duffy’s predecessor at the DOT, also weighed in on the controversy. "This is brutally out of touch: a Trump Cabinet member making a documentary about himself while regular families can’t afford road trips anymore, because Trump and his war put gas prices through the roof.".
