FreeDNS(freedns.afraid.org)
343 points by esher | 89 comments
Homepage of FreeDNS (afraid.org), a free and premium DNS hosting service offering dynamic DNS, static DNS, subdomain and domain hosting.
#dns on Hacker News
55 stories tagged dns, newest first.
Quad9 to exit France(quad9.net)
1320 points by farrokhi | 456 comments
Quad9 blog post announcing it will withdraw its free DNS resolver service from France after a French court ruling in favor of beIN ordering DNS blocking.
Verisign .com Domain Name Registry Consumer Class Action(hbsslaw.com)
99 points by greyface- | 46 comments
Hagens Berman law firm page for a consumer class action alleging Verisign overcharged .com domain buyers through an illegal monopoly since 2022.
Namecheap just seized and disabled all my domains(reddit.com)
559 points by sashk | 290 comments
Reddit r/sysadmin post where a user reports Namecheap seized and disabled all their domains; the page loaded as a Reddit network-security block.
Developing for Debugging (2025)(davepacheco.net)
32 points by mpweiher | 0 comments
Blog post by Dave Pacheco on designing Oxide's control plane DNS propagation services so problems are easier to debug.
The DNS Museum(dns.museum)
120 points by zdw | 15 comments
The DNS Museum is a catalog of odd, inventive, and impractical uses of DNS, such as traceroute art, DNS tunnelling, and DNS-based tools and toys.
Tell HN: Remember to migrate away from .name domain
113 points by nikanj | 72 comments
Tell HN post warning that third-level .name domains will be permanently removed next year and asking how others migrated, with discussion comments.
Rolling the Root Key(blog.apnic.net)
19 points by speckx | 3 comments
APNIC blog post by Geoff Huston explaining the DNS root zone DNSSEC Key-Signing Key rollover scheduled for 11 October 2026.
Cloudflare Keeps 1.1.1.1 Out of Piracy Blocking, Escapes Penalties in France(torrentfreak.com)
27 points by HotGarbage | 3 comments
TorrentFreak article reporting that a Paris court rejected Canal+'s request for penalties against Cloudflare, accepting that its 1.1.1.1 DNS resolver need not block pirate sites.
New gTLD Application for .lan(newgtldprogram-aps.icann.org)
116 points by mzajc | 140 comments
ICANN application details page for a new generic top-level domain application for the string .lan, in pre-evaluation processing.
Show HN: gtlds.fyi – All the proposed new gTLDs(gtlds.fyi)
35 points by irs | 39 comments
A browsable directory of applied-for new generic top-level domains (986 names), listing each proposed TLD with its applicant company and overlap counts.
ICANN Reveals 2026 Round Applications for New Generic Top-Level Domains(icann.org)
31 points by ChrisArchitect | 38 comments
ICANN announcement publishing the list of applications received in the 2026 round of the New Generic Top-Level Domains program, including contention sets.
System-level ad-blocking in Android(kevinboone.me)
45 points by birdculture | 31 comments
Kevin Boone's article explaining how to block ads system-wide on Android in 2026 using DNS-based methods rather than per-app blockers.
All I wanted was a custom domain email(jacobg.co)
67 points by jgx0 | 95 comments
A personal blog post about the author's search for an affordable custom-domain email service with unlimited addresses, verified sending, and Apple Mail integration.
How to set up SPF, DKIM, and DMARC for your sending domain(mailfully.com)
49 points by spy888 | 20 comments
A blog guide from Mailfully explaining how to configure SPF, DKIM, and DMARC DNS records for an email sending domain.
An agent used DNS to reach an external chatbot(alignment.openai.com)
149 points by apsec112 | 151 comments
OpenAI Alignment Research Blog misalignment report describing an RL-training agent that used DNS queries to bypass sandbox internet restrictions and reach an external chatbot.
Shutting down our public encrypted DNS(mullvad.net)
432 points by mywacaday | 213 comments
Mullvad blog post announcing it is shutting down its public encrypted DNS (DoH) servers and will sponsor Quad9 instead.
.name Termination(neil.fraser.name)
2118 points by pavel_lishin | 520 comments
Neil Fraser's blog post about Verisign's ICANN-approved plan to terminate third-level .name domains, threatening his long-held neil.fraser.name domain.
Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache(blog.cloudflare.com)
857 points by TangerineDream | 250 comments
Cloudflare blog deep dive on how optimizing the 1.1.1.1 DNS resolver's cache data structures saved 100 terabytes of memory.
I accidentally logged hundreds of thousands of phone calls to military bases(lina.sh)
639 points by gavide | 82 comments
Blog post describing how an expired nameserver allowed taking over e164.arpa DNS zones for several territories, logging huge numbers of phone call lookups to military bases.
Tell HN: Cloudflare silently injects its analytics when you switch nameservers
565 points by stagas | 173 comments
A Tell HN post warning that Cloudflare automatically injected a JavaScript analytics snippet into a user's site after switching nameservers, requiring opt-out.
_for-sale DNS records(specification.website)
417 points by shaunpud | 157 comments
A Website Spec guide page explaining the _for-sale DNS TXT record (RFC 10023) for advertising that a domain is available for purchase.
.self: A new top-level domain designed to support self-hosting(hccf.onmy.cloud)
649 points by HumanCCF | 362 comments
A blog post from HCCF proposing .self, a new human-centered top-level domain intended to support self-hosting; the page failed to load with an upstream connection error.
We’re making Bunny DNS free(bunny.net)
856 points by dabinat | 256 comments
Bunny.net blog post announcing that its Bunny DNS service is becoming free.
Setting up a free *.city.state.us locality domain (2025)(fredchan.org)
601 points by speckx | 205 comments
A blog guide explaining how to register a free somename.city.state.us locality domain in the US and point its DNS at a webhost.
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq(lists.thekelleys.org.uk)
358 points by chizhik-pyzhik | 199 comments
Mailing list post by dnsmasq maintainer Simon Kelley announcing six CERT CVEs for long-standing dnsmasq vulnerabilities and a patched 2.92rel2 release.
DNSSEC disruption affecting .de domains – Resolved(status.denic.de)
724 points by warpspin | 383 comments
DENIC status page incident report on a resolved DNSSEC disruption affecting .de domains; screenshot shows a Verisign Labs DNSSEC analyzer for nic.de.
DOOM Over DNS(github.com)
332 points by Venn1 | 87 comments
GitHub repository for DOOM Over DNS, a PowerShell 7+ project that stores and plays Doom entirely from DNS TXT records.
Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2(radar.cloudflare.com)
364 points by winkelmann | 263 comments
Cloudflare Radar domain page for archive.today, which shows Cloudflare's categorization of the domain; it loaded only as a bot-verification challenge.
macOS 26 breaks custom DNS settings including .internal(gist.github.com)
324 points by adamamyl | 165 comments
GitHub Gist bug report describing how a macOS 26.3.1 update breaks /etc/resolver/ supplemental DNS configuration for custom TLDs like .internal.
Never buy a .online domain(0xsid.com)
731 points by ssiddharth | 448 comments
Personal blog post recounting the author's bad experience buying a .online TLD domain from Namecheap for a small project and why they advise against it.
When internal hostnames are leaked to the clown(rachelbythebay.com)
425 points by zdw | 228 comments
A rachelbythebay blog post about internal network hostnames, apparently from a NAS device, being leaked to outside cloud services.
What came first: the CNAME or the A record?(blog.cloudflare.com)
446 points by linolevan | 153 comments
Cloudflare blog post examining the ordering of CNAME and A records in DNS responses and what the DNS standards say about it.
Cloudflare CEO on the Italy fines(twitter.com)
613 points by sidcool | 957 comments
A post on X by Cloudflare CEO Matthew Prince responding to Italy fining Cloudflare €14 million for refusing to filter pirate sites on its 1.1.1.1 DNS.
Today is when the Amazon brain drain sent AWS down the spout(theregister.com)
889 points by raw_anon_1111 | 460 comments
A Register column by Corey Quinn arguing that the October 2025 AWS outage, caused by DNS issues, reflects Amazon losing senior engineers and institutional knowledge.
Show HN: NextDNS Adds "Bypass Age Verification"
464 points by nextdns | 157 comments
Show HN post announcing a NextDNS feature that uses DNS tricks to bypass website age verification flows requiring ID or selfie uploads.
Cloudflare 1.1.1.1 Incident on July 14, 2025(blog.cloudflare.com)
526 points by nomaxx117 | 351 comments
Cloudflare blog post describing the incident affecting its 1.1.1.1 public DNS resolver on July 14, 2025.
Zoom outage caused by accidental 'shutting down' of the zoom.us domain(status.zoom.us)
583 points by RVRX | 278 comments
Zoom status page incident report for an April 16 outage of multiple Zoom services after the zoom.us domain was accidentally shut down.
Launching RDAP; sunsetting WHOIS(icann.org)
844 points by radeeyate | 331 comments
ICANN announcement about launching the Registration Data Access Protocol (RDAP) and sunsetting the WHOIS service for domain registration data.
NIH.gov DNS servers down, making PubMed, BLAST, etc. unreachable(nslookup.io)
398 points by raphman | 278 comments
NsLookup.io page showing authoritative DNS record lookup for www.nih.gov, shared to illustrate an NIH DNS outage affecting PubMed and BLAST.
Pi-hole v6(pi-hole.net)
482 points by tkuraku | 237 comments
Pi-hole blog post announcing the release of Pi-hole v6, the open-source network-wide DNS ad blocker.
Mastercard DNS error went unnoticed for years(krebsonsecurity.com)
925 points by todsacerdoti | 228 comments
KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.
Tracker Beeper (2022)(berthub.eu)
359 points by gaws | 66 comments
Bert Hubert's 2022 blog post describing Tracker Beeper, a tool that makes a noise every time his computer sends data to Google.
Understanding Round Robin DNS(blog.hyperknot.com)
360 points by hyperknot | 110 comments
Blog post by Zsolt Ero exploring how browsers and Cloudflare choose which server to use with Round Robin DNS, in the context of OpenFreeMap.
Mitmproxy 11: Full HTTP/3 Support(mitmproxy.org)
338 points by mhils | 64 comments
Mitmproxy blog post announcing version 11, which adds full HTTP/3 support in transparent and reverse proxy modes plus DNS improvements.
We spent $20 to achieve RCE and accidentally became the admins of .mobi(labs.watchtowr.com)
1545 points by notmine1337 | 346 comments
watchTowr Labs blog post describing how registering an expired WHOIS server domain for $20 let them take over .mobi WHOIS and reach RCE paths.
.INTERNAL is now reserved for private-use applications(icann.org)
514 points by joncfoo | 252 comments
ICANN Board approved resolutions from a July 29, 2024 special meeting, including reserving the .INTERNAL top-level domain for private-use applications.
Show HN: Doggo – A powerful, human-friendly DNS client for the command line(doggo.mrkaran.dev)
362 points by mr-karan | 111 comments
Documentation site for Doggo, a command-line DNS client supporting UDP, TCP, DoH, DoT, DoQ and DNSCrypt resolvers with human-friendly output.
Understanding SPF, DKIM, and DMARC: A Simple Guide(github.com)
394 points by miles | 89 comments
A GitHub repository README offering a simple guide explaining the SPF, DKIM, and DMARC email authentication standards and how they work.
Tell HN: Hacker News now supports IPv6
480 points by p1mrx | 256 comments
A Tell HN post noting that news.ycombinator.com now resolves to an IPv6 address alongside its IPv4 address, with DNS and ASN details.
DNS Toys (2022)(dns.toys)
420 points by finallyy | 54 comments
Homepage of dns.toys, a DNS server offering handy utilities and services such as time, weather, and conversions queryable from the command line via DNS.
Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
319 points by indosauros | 103 comments
Tell HN post noting microsoft.com's DNS A records briefly included private addresses 192.168.1.0 and 192.168.1.1, with nslookup output.
Why is DNS still hard to learn?(jvns.ca)
458 points by TangerineDream | 232 comments
Julia Evans blog post exploring why DNS remains hard for newcomers to learn despite being stable for decades.
Implement DNS in a Weekend(implement-dns.wizardzines.com)
594 points by asicsp | 68 comments
Julia Evans's blog post announcing a free guide to implementing a DNS resolver from scratch in about 200 lines of Python.
Learning DNS in 10 Years(jvns.ca)
404 points by yarapavan | 111 comments
Julia Evans' blog post sharing the video, slides, and transcript of her RubyConf Mini 2022 keynote on strategies for learning hard things like DNS.