30-something grey wolf therian and furry. Admin of yiffit.net lemmy instance and packmates.org mastodon instance.

  • 4 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: June 7th, 2023

help-circle





  • Actually I’ve had really good success in paying for privacy services with it. I wouldn’t do it any other way, especially for things like a VPN where you don’t want the provider to have to keep your name and address due to legal requirements.

    Another great use case is sending money abroad, especially to countries where there’s other sorts of financial restrictions.













  • Definitely install fail2ban and use certificates for ssh authentication. Also, use cloudflare and consider using an email delivery service like jetmail instead of sending mail directly from the instance.

    You could then block any incoming traffic that doesn’t come for port the ssh port or from cloud flare for port 443.



  • Yes. ICANN has the root DNS servers which point to the DNS servers of the registries (company that manages a domain extension in exchange for a hefty sum each year) which point at the DNS servers of the registrar (company authorized by the registry to sell domains) which either hosts your DNS entries or they can point to any server you tell them.

    The commercial DNS you mention are called resolvers and are specialized in retrieving records from the linked chain of servers I mentioned above and caching them so it’ll take less time.

    You could point your own resolver to the ICANN root server and then set up your computer to use that resolver.


  • When you buy a domain, you buy the right to (among other things) edit the address book for that domain, also known as DNS zones.

    Once you buy the domain, for example, you can tell your domain provider “I want example.com to point to the IP address 1.2.3.4”.

    Most importantly the domain provider has been given the rights to sell these domains by ICANN who manages what is known as the “root DNS servers”.

    When a computer has no idea who to contact to resolve a domain it contacts the root DNS servers first and these tell them to check the entries of the domain provider. It all trickles down from there. If the domain provider wasn’t approved by ICANN then their root DNS servers would never point to them.

    In reality there’s more organizations involved including: resellers, registrars and registries. But they all follow the same principle and create a chain of linked address books (DNS zones) that flow from the root DNS servers.

    There is not stopping you from setting up your own domain system. You can get all the domains you want for free, but no other computer would be able to access them because by default the convention is to trust only the ICANN DNS servers.

    If you use windows, Google “hosts file”. In that file you can enter any domain you want and an associated IP address and your computer will comply with it. You could even have google.com point to your own homepage, but of course that would only be your computer.

    By the way, if you hear about DNS servers like google’s 8.8.8.8 or cloudflare’s 1.1.1.1, these are not the root DNS servers. These are called “resolvers” and they are the ones that talk to the root DNS zones and cache their response so that it can be resolved faster instead of having to go down the whole chain every time.