Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Secondary authoritative DNS service providers compared (2020) (ctrl.blog)
3 points by indigodaddy on April 4, 2024 | hide | past | favorite | 4 comments


   .

     Service                AXFR DNSSEC  TSIG IPv6    Route   POP   DNSCurve  DoT/DoQ
     Akamai Edge DNS        Yes  Yes     Yes  Yes     Anycast 1000  No        No
     Alibaba Cloud DNS      Yes  No      Yes  Yes     Anycast 19    No        No
     Amazon Route 53        No   No      No   Yes     Anycast 53    No        No
     Microsoft Azure DNS    No   No      No   Partial Anycast 15    No        No
     BuddyNS                Yes  No      No   Yes     Unicast 11    Yes       No
     CloudNS                Yes  No      No   Partial Anycast 23    No        No
     CloufloorDNS           Yes  Yes     No   Partial Anycast 25    No        No
     deSEC                  Yes  Yes     Yes  Yes     Anycast 1     No        Yes
     DNSMadeEasy            Yes  Yes     No   Yes     Anycast 15    No        No
     DNSUnlimited           Yes  Yes     Yes  Yes     Unicast 5     No        No
     Dyn Secondary          Yes  No      Yes  Yes     Anycast 18    No        No
     GoDaddy Premium DNS    Yes  No      Yes  Yes     Anycast 60    No        No
     Hurricane Electric DNS Yes  Partial Yes  Yes     Anycast 24    No        No
     NameCheap Premium DNS  No   No      No   Yes     Anycast 17    No        No
     No IP Squared          Yes  No      No   Partial Anycast 100   No        No
     NS1                    Yes  Partial Yes  No      Anycast 25    No        No
     RcodeZero              Yes  Yes     Yes  Yes     Anycast 21    No        No

NB. I do not know the number of POP for deSEC but it is certainly more than 1.

https://desec.io/

https://www.securesystems.de/dns-security/


.

    Service                AXFR DNSSEC  TSIG IPv6    Route   POP   DNSCurve
    Akamai Edge DNS        Yes  Yes     Yes  Yes     Anycast 1000  No
    Alibaba Cloud DNS      Yes  No      Yes  Yes     Anycast 19    No
    Amazon Route 53        No   No      No   Yes     Anycast 53    No 
    Microsoft Azure DNS    No   No      No   Partial Anycast 15    No 
    BuddyNS                Yes  No      No   Yes     Unicast 11    Yes  
    CloudNS                Yes  No      No   Partial Anycast 23    No
    CloufloorDNS           Yes  Yes     No   Partial Anycast 25    No
    DNSMadeEasy            Yes  Yes     No   Yes     Anycast 15    No
    DNSUnlimited           Yes  Yes     Yes  Yes     Unicast 5     No
    Dyn Secondary          Yes  No      Yes  Yes     Anycast 18    No
    GoDaddy Premium DNS    Yes  No      Yes  Yes     Anycast 60    No
    Hurricane Electric DNS Yes  Partial Yes  Yes     Anycast 24    No
    NameCheap Premium DNS  No   No      No   Yes     Anycast 17    No
    No IP Squared          Yes  No      No   Partial Anycast 100   No 
    NS1                    Yes  Partial Yes  No      Anycast 25    No
    RcodeZero              Yes  Yes     Yes  Yes     Anycast 21    No
BuddyNS "Astronaut" accounts are Anycast and offer DNSSEC.

https://www.buddyns.com/faq/

https://www.buddyns.com/services/dns-security/

BuddyNS enables DNSCurve for free accounts; none of these other providers even offer it.


Yes because DNSCurve is no good.

DNSCurve is abusable by local governments so ICANN has stated that the root servers will never implement DNSCurve.

https://security.stackexchange.com/questions/45770/if-dnssec...


This is an assertion attributed to a Namecoin talk at CCC, and it makes no sense: local governments already have practically absolute control over their TLDs. The reason DNSCurve isn't deploying is that DoH has sucked the wind out of its sails.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: