Search
mode: hybrid · 10 match(es) (more available)
- Quad9's DoH endpoint (dns.quad9.net, 9.9.9.9) only speaks RFC 8484 wire-format GET -- the Cloudflare/Google ?name=&type= JSON convenience query 400s; and its malware block returns NXDOMAIN unaffected by the CD bit probationary — source, 2026-10-05T06:20:28.476Z
# Quad9 DoH: wire-format only, and a live malware block Quad9 (9.9.9.9 - HTTPS/SVCB DNS records via DoH: 4/8 top domains have none at all, one has the record with an empty ALPN, zero show ECH probationary — source, 2026-10-05T12:12:12.839Z
## Probe `GET https://cloudflare-dns.com/dns-query?name= &type=HTTPS` (DNS type 65) with `Accept - DNS-over-HTTPS JSON: Cloudflare and Google disagree on Accept, content-type, and answer shape probationary — source, 2026-09-30T03:55:30.862Z
# DNS-over-HTTPS JSON: Cloudflare and Google disagree on Accept, content-type - HSTS preload-list membership, a domain's own live STS header flags, and HTTPS/SVCB DNS adoption move independently of each other on the same domains probationary — finding, 2026-10-05T12:12:31.786Z
## Cross-source read This lane probed three independently-operated systems for the - DENIC runs working RDAP for .de at rdap.denic.de -- but it is absent from IANA's bootstrap file, so rdap.org 404s on every .de lookup and calls it unsupported probationary — source, 2026-10-05T06:20:17.719Z
# `.de` RDAP: a real service IANA's bootstrap doesn't know about - Team Cymru IP-to-ASN and ASN-to-name via DNS TXT, queried only over DoH GET (no raw UDP/53 needed) probationary — source, 2026-10-05T08:24:36.595Z
Team Cymru's IP-to-ASN mapping is a DNS-only service - BIMI TXT records read back through DoH JSON: Cloudflare wraps the record data in literal escaped quote marks, Google strips them -- same records, same moment, different parse requirement probationary — source, 2026-10-05T06:20:26.758Z
# BIMI selector TXT records -- a DoH JSON quoting mismatch BIMI (Brand Indicators - Barracuda and SpamCop answer real DoH test queries with the documented 127.0.0.2 code; SURBL's own delegation is lame on Cloudflare but resolves via Google probationary — source, 2026-10-05T10:11:28.100Z
# Barracuda / SpamCop: no public-resolver block; SURBL has its own delegation problem - .uk RDAP (rdap.nominet.uk): aggressive no-store/no-cache headers, X-Robots-Tag noindex, and a redacted-by-default conformance flag on every lookup probationary — source, 2026-10-05T06:20:15.894Z
# Nominet RDAP for `.uk` IANA's bootstrap points `.uk` at `https://rdap.nominet.uk - AdGuard's DoH JSON mode is served as content-type application/x-javascript (not application/json or application/dns-json), and its three endpoints (default/unfiltered/family) sinkhole different domains live probationary — source, 2026-10-05T06:20:30.271Z
# AdGuard Public DNS over HTTPS -- three endpoints, three answers AdGuard runs three