{"slug": "cloudflare-dns-1-1-1-1", "name": "Cloudflare DNS 1.1.1.1", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 7, "commenters": 32, "warners": 13, "score": -2.369, "rising": -0.96, "first": "2025-11-06", "latest": "2026-10-06", "why": "I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 7, "neutral": 10, "compare": 3, "warn": 14}, "spark": [1, 0, 1, 0, 3, 1, 0, 0, 0, 0, 1, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "kind": "", "icon": true, "domain": "1.1", "github_repo": null, "official_url": "https://one.one.one.one", "pricing": "", "aliases": ["Cloudflare DNS", "1.1.1.1", "Cloudflare DNS 1.1.1.1", "Cloudflare DNS (1.1.1.1)"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 793112768, "item_id": 49569548, "url": "https://news.ycombinator.com/item?id=49569548", "by": "brettdav", "date": "2026-09-04", "version": null, "stance": "recommend", "quote": "What about Cloudflare\u2019s public DNS?", "excerpt": "What about Cloudflare\u2019s public DNS? https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families 1.1.1.2 1.0.0.2 2606:4700:4700::1112 2606:4700:4700::1002", "context": "", "use_case": "Public DNS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 763867040, "item_id": 47741690, "url": "https://news.ycombinator.com/item?id=47741690", "by": "giorgioz", "date": "2026-04-12", "version": null, "stance": "recommend", "quote": "I think changing your default DNS servers to Google 8.8.8.8 or Cloudflare 1.1.1.1 might bypass the spanish sunday ban on Cloudlflare.", "excerpt": "POSSIBLE FIX: I think changing your default DNS servers to Google 8.8.8.8 or Cloudflare 1.1.1.1 might bypass the spanish sunday ban on Cloudlflare. macOS + Cloudlfare 1.1.1.1 https://developers.cloudflare.com/1.1.1.1/setup/macos/ Google 8.8.8.8 https://developers.google.com/speed/public-dns/docs/using", "context": "", "use_case": "", "switched_from": "", "story": "Tell HN: docker pull fails in spain due to football cloudflare block"}, {"id": 759669584, "item_id": 47479349, "url": "https://news.ycombinator.com/item?id=47479349", "by": "mat_b", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "excerpt": "I did some experimenting recently and I'm quite convinced that when I use Comcasts DNS they are selling it to advertisers. I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 733410720, "item_id": 45838170, "url": "https://news.ycombinator.com/item?id=45838170", "by": "winkelmann", "date": "2025-11-06", "version": null, "stance": "recommend", "quote": "I use Cloudflare's DNS and it works fine for me.", "excerpt": "This was fixed/changed at some point. I use Cloudflare's DNS and it works fine for me.", "context": "", "use_case": "", "switched_from": "", "story": "FBI tries to unmask owner of archive.is"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 799644384, "item_id": 49977774, "url": "https://news.ycombinator.com/item?id=49977774", "by": "JdeBP", "date": "2026-10-06", "version": null, "stance": "warn", "quote": "the price of having to measure how many people had ignorantly or lazily put four ones", "excerpt": "\u2026 then you'll be back in the world before CloudFlare set up its public DNS service, which is also the world where taking over 1.1.1.1 in the first place came at the price of having to measure how many people had ignorantly or lazily put four ones into somewhere that they had to fill in an IP address, and how much bogus and positively risky (to them) traffic there was being caused by people just thinking 'I will just ", "context": "", "use_case": "", "switched_from": "", "story": "Example.com just launched the biggest redesign in decades"}, {"id": 796567344, "item_id": 49785459, "url": "https://news.ycombinator.com/item?id=49785459", "by": "RoryH", "date": "2026-09-21", "version": null, "stance": "warn", "quote": "you are using Cloudflare DNS", "excerpt": "Most likely is that you are using Cloudflare DNS: https://jarv.is/notes/cloudflare-dns-archive-is-blocked", "context": "", "use_case": "", "switched_from": "", "story": "Spain orders blocks on Archive.today and its mirrors"}, {"id": 784681792, "item_id": 49042612, "url": "https://news.ycombinator.com/item?id=49042612", "by": "Bender", "date": "2026-07-24", "version": null, "stance": "warn", "quote": "CF refuses to forward EDNS Client Subnet information and so they return bogus information", "excerpt": "Who are you using for DNS? If Cloudflare there is a long running squabble between Archive's admins and CF as CF refuses to forward EDNS Client Subnet information and so they return bogus information to Cloudflares servers. It responds fine for me but I am using my own DNS server that talk directly to the root/tld servers. Here are some other public DNS servers. [1] ...not my site [1] - https://dnschecker.org/public-d", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What's Up with Archive.today?"}, {"id": 779259856, "item_id": 48703741, "url": "https://news.ycombinator.com/item?id=48703741", "by": "adithyassekhar", "date": "2026-06-27", "version": null, "stance": "warn", "quote": "My ISP\u2019s google global cache is broken every time I use cloudflare.", "excerpt": "Should add one more filter: EDNS client subnets. Some like cloudflare doesn\u2019t support that in the name of privacy. EDNS lets the dns server of the site you are visiting know from where you are connecting and can give you the closest server. 1.1.1.1 does not do that. This breaks all sorts of ISP cache and peering arrangements. Here\u2019s an example: My ISP\u2019s google global cache is broken every time I use cloudflare. With ", "context": "", "use_case": "public DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}]}], "who": [{"by": "kinow", "context": "in Spain, affected by LaLiga blocks", "url": "https://news.ycombinator.com/item?id=47965742", "date": "2026-04-30"}], "tags": [], "use_cases": ["public dns resolver", "dns resolver", "internal server dns", "dns over tls resolver", "fallback dns resolver", "dns hosting"], "compared": [{"slug": "quad9", "name": "Quad9", "co": 5, "switched_from": 1, "switched_to": 1}, {"slug": "pi-hole", "name": "Pi-hole", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "google-public-dns", "name": "Google Public DNS", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "nextdns", "name": "NextDNS", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "opendns", "name": "OpenDNS", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=47474255", "title": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2", "mentions": 5}, {"url": "https://news.ycombinator.com/item?id=48702273", "title": "Choosing a Public DNS Resolver", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=46555760", "title": "Cloudflare CEO on the Italy Fines", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=49568579", "title": "Shutting down our public encrypted DNS", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=45836826", "title": "FBI tries to unmask owner of archive.is", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49971921", "title": "Example.com just launched the biggest redesign in decades", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1, "warn": 2, "neutral": 1}, "2025-12": {"warn": 2, "neutral": 1}, "2026-01": {"warn": 2, "neutral": 3, "recommend": 1}, "2026-02": {"neutral": 1}, "2026-03": {"recommend": 3, "warn": 3}, "2026-04": {"recommend": 1, "neutral": 1}, "2026-05": {"compare": 1, "warn": 1}, "2026-06": {"warn": 1, "compare": 2, "neutral": 1}, "2026-07": {"warn": 1}, "2026-08": {}, "2026-09": {"recommend": 1, "neutral": 1, "warn": 1}, "2026-10": {"neutral": 1, "warn": 1}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 799644384, "item_id": 49977774, "url": "https://news.ycombinator.com/item?id=49977774", "by": "JdeBP", "date": "2026-10-06", "version": null, "stance": "warn", "quote": "the price of having to measure how many people had ignorantly or lazily put four ones", "excerpt": "\u2026 then you'll be back in the world before CloudFlare set up its public DNS service, which is also the world where taking over 1.1.1.1 in the first place came at the price of having to measure how many people had ignorantly or lazily put four ones into somewhere that they had to fill in an IP address, and how much bogus and positively risky (to them) traffic there was being caused by people just thinking 'I will just ", "context": "", "use_case": "", "switched_from": "", "story": "Example.com just launched the biggest redesign in decades"}, {"id": 799351520, "item_id": 49959470, "url": "https://news.ycombinator.com/item?id=49959470", "by": "306bobby", "date": "2026-10-05", "version": null, "stance": "neutral", "quote": "I use .lan.<domain>.net for my internal servers at work, through cloudflare dns.", "excerpt": "I use .lan.<domain>.net for my internal servers at work, through cloudflare dns. It's simple, all .lan get resolved to the same IP. And the server has something like caddy or nginx to take the traffic, see the destination, and forward properly into the network", "context": "", "use_case": "internal server DNS", "switched_from": "", "story": "Cloudflare opens more Enterprise-only features to all customers"}, {"id": 796567344, "item_id": 49785459, "url": "https://news.ycombinator.com/item?id=49785459", "by": "RoryH", "date": "2026-09-21", "version": null, "stance": "warn", "quote": "you are using Cloudflare DNS", "excerpt": "Most likely is that you are using Cloudflare DNS: https://jarv.is/notes/cloudflare-dns-archive-is-blocked", "context": "", "use_case": "", "switched_from": "", "story": "Spain orders blocks on Archive.today and its mirrors"}, {"id": 793159264, "item_id": 49572454, "url": "https://news.ycombinator.com/item?id=49572454", "by": "usr1106", "date": "2026-09-05", "version": null, "stance": "neutral", "quote": "I use Clouldflare DoT and enabled validation in systemd-resolved", "excerpt": "I use Clouldflare DoT and enabled validation in systemd-resolved some time ago. Not because I would be particularly paranoid, but more out of curiosity how it works. I noticed no problems, except for with Atlassian. They use 2 second level domains (at least), one under .com signed and one under .net (unsigned) (IIRC). Most things worked like normal, but some Jira extension stopped working. Turned out that systemd did", "context": "", "use_case": "DNS over TLS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 793112768, "item_id": 49569548, "url": "https://news.ycombinator.com/item?id=49569548", "by": "brettdav", "date": "2026-09-04", "version": null, "stance": "recommend", "quote": "What about Cloudflare\u2019s public DNS?", "excerpt": "What about Cloudflare\u2019s public DNS? https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families 1.1.1.2 1.0.0.2 2606:4700:4700::1112 2606:4700:4700::1002", "context": "", "use_case": "Public DNS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 784681792, "item_id": 49042612, "url": "https://news.ycombinator.com/item?id=49042612", "by": "Bender", "date": "2026-07-24", "version": null, "stance": "warn", "quote": "CF refuses to forward EDNS Client Subnet information and so they return bogus information", "excerpt": "Who are you using for DNS? If Cloudflare there is a long running squabble between Archive's admins and CF as CF refuses to forward EDNS Client Subnet information and so they return bogus information to Cloudflares servers. It responds fine for me but I am using my own DNS server that talk directly to the root/tld servers. Here are some other public DNS servers. [1] ...not my site [1] - https://dnschecker.org/public-d", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What's Up with Archive.today?"}, {"id": 779358800, "item_id": 48709925, "url": "https://news.ycombinator.com/item?id=48709925", "by": "ratorx", "date": "2026-06-28", "version": null, "stance": "neutral", "quote": "Cloudflare explicitly does not use ECS", "excerpt": "Anycast DNS doesn\u2019t mean what you think it means. Your DNS traffic to Cloudflare is routed via anycast. If Cloudflare is sending this DNS query (eg to an authoritative DNS server), the IP address it uses for this is not going to be the anycast one. These IPs are geolocatable and Cloudflare even publishes feeds of their approximate location. The response you get will be geolocated based on the IP that Cloudflare is us", "context": "", "use_case": "", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 779305424, "item_id": 48706589, "url": "https://news.ycombinator.com/item?id=48706589", "by": "JdeBP", "date": "2026-06-28", "version": null, "stance": "compare", "quote": "CloudFlare has had some independent auditing done, by an accountancy firm.", "excerpt": "It isn't really primarily about organization oversight, though. The weird goings on are in practice usually at the behest of the people paying the salaries of all of the people involved (which includes law enforcement, which goes through corporate channels). There's no real independent oversight for that common case. Everyone is on the payroll. (-: As a concrete thought experiment, consider if (say) a WWW/DNS hosting", "context": "", "use_case": "", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 779303873, "item_id": 48706492, "url": "https://news.ycombinator.com/item?id=48706492", "by": "chopin", "date": "2026-06-28", "version": null, "stance": "compare", "quote": "Cloudflare is very robust but I just don't like them.", "excerpt": "I use 9.9.9.9 but it failed me a couple of times in the past two months. Cloudflare is very robust but I just don't like them. Falling back on them silently is not what I want. I am rather using them directly when quad9 fails.", "context": "", "use_case": "fallback DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 779259856, "item_id": 48703741, "url": "https://news.ycombinator.com/item?id=48703741", "by": "adithyassekhar", "date": "2026-06-27", "version": null, "stance": "warn", "quote": "My ISP\u2019s google global cache is broken every time I use cloudflare.", "excerpt": "Should add one more filter: EDNS client subnets. Some like cloudflare doesn\u2019t support that in the name of privacy. EDNS lets the dns server of the site you are visiting know from where you are connecting and can give you the closest server. 1.1.1.1 does not do that. This breaks all sorts of ISP cache and peering arrangements. Here\u2019s an example: My ISP\u2019s google global cache is broken every time I use cloudflare. With ", "context": "", "use_case": "public DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 773485904, "item_id": 48342869, "url": "https://news.ycombinator.com/item?id=48342869", "by": "cobertos", "date": "2026-05-30", "version": null, "stance": "warn", "quote": "they will rewrite your CAA record", "excerpt": "Just be careful, if you host your DNS at Cloudflare (maybe others?), they will rewrite your CAA record[0] if you use TLS with them. This is in the name of convenience but it was surprising when I first learned. [0]: https://developers.cloudflare.com/ssl/edge-certificates/caa-records/#caa-records-added-by-cloudflare", "context": "", "use_case": "DNS hosting", "switched_from": "", "story": "Parallel Reconstruction of Lawful TLS Wiretapping"}, {"id": 770000192, "item_id": 48125012, "url": "https://news.ycombinator.com/item?id=48125012", "by": "xd1936", "date": "2026-05-13", "version": null, "stance": "compare", "quote": "Could I use Cloudflare's free nameservers instead of Amazon Lightsail?", "excerpt": "Could I use Cloudflare's free nameservers instead of Amazon Lightsail?", "context": "", "use_case": "", "switched_from": "", "story": "Setting up a free *.city.state.us locality domain"}, {"id": 767451872, "item_id": 47965742, "url": "https://news.ycombinator.com/item?id=47965742", "by": "kinow", "date": "2026-04-30", "version": null, "stance": "neutral", "quote": "even though I use 1.1.1.1", "excerpt": "I hadn't heard about Cloudflare WARP. Found this Reddit thread with questions/comments I also had, https://www.reddit.com/r/CloudFlare/comments/ldejnt/how_is_cloudflare_warp_different_from_a_vpn_what/, and also what I think is CF's main website for WARP info, https://one.one.one.one/ (which I must confess I had never head even though I use 1.1.1.1). I struggle with LaLiga's filter during matches, but I am more intere", "context": "in Spain, affected by LaLiga blocks", "use_case": "DNS", "switched_from": "", "story": "Spain's parliament will act against massive IP blockages by LaLiga"}, {"id": 763867040, "item_id": 47741690, "url": "https://news.ycombinator.com/item?id=47741690", "by": "giorgioz", "date": "2026-04-12", "version": null, "stance": "recommend", "quote": "I think changing your default DNS servers to Google 8.8.8.8 or Cloudflare 1.1.1.1 might bypass the spanish sunday ban on Cloudlflare.", "excerpt": "POSSIBLE FIX: I think changing your default DNS servers to Google 8.8.8.8 or Cloudflare 1.1.1.1 might bypass the spanish sunday ban on Cloudlflare. macOS + Cloudlfare 1.1.1.1 https://developers.cloudflare.com/1.1.1.1/setup/macos/ Google 8.8.8.8 https://developers.google.com/speed/public-dns/docs/using", "context": "", "use_case": "", "switched_from": "", "story": "Tell HN: docker pull fails in spain due to football cloudflare block"}, {"id": 761117520, "item_id": 47569845, "url": "https://news.ycombinator.com/item?id=47569845", "by": "tim-tday", "date": "2026-03-29", "version": null, "stance": "warn", "quote": "I think Cloudflare dns stopped resolving it", "excerpt": "I think Cloudflare dns stopped resolving it for some bullshit reason. I switched to 8.8.8.8 and it works again.", "context": "", "use_case": "", "switched_from": "", "story": "Airfare Is Just the Beginning"}, {"id": 759949504, "item_id": 47496844, "url": "https://news.ycombinator.com/item?id=47496844", "by": "mapontosevenths", "date": "2026-03-23", "version": null, "stance": "warn", "quote": "It won't work if you use 1.1.1.1 for DNS. They're blocking it again.", "excerpt": "http://archive.today/2026.03.23-234733/https://www.heise.de/en/news/WTF-Police-responded-on-Saturday-night-due-to-a-zero-day-11221590.html It won't work if you use 1.1.1.1 for DNS. They're blocking it again.", "context": "", "use_case": "", "switched_from": "", "story": "WTF: Police responded on Saturday night due to a zero-day"}, {"id": 759669584, "item_id": 47479349, "url": "https://news.ycombinator.com/item?id=47479349", "by": "mat_b", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "excerpt": "I did some experimenting recently and I'm quite convinced that when I use Comcasts DNS they are selling it to advertisers. I've switched to 1.1.1.1 simply because it annoys me that Comcast is doing this.", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759626768, "item_id": 47476673, "url": "https://news.ycombinator.com/item?id=47476673", "by": "surgical_fire", "date": "2026-03-22", "version": null, "stance": "warn", "quote": "I had issues more than once with domain name resolution when I used 1.1.1.1.", "excerpt": "No, I do not keep any logs from domain name resolution from the DNS service I used from 7+ years ago. If you do, I commend you. I used the term \"blocking\" in a loose sense. I have no idea if Cloudflare was failing to resolve certain domains because it is a shitty service, or if it was ordered to block those domain names by its government, or if it was actively not resolving domain names because it thought a good idea", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759621505, "item_id": 47476344, "url": "https://news.ycombinator.com/item?id=47476344", "by": "surgical_fire", "date": "2026-03-22", "version": null, "stance": "warn", "quote": "Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access.", "excerpt": "Quad9. Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access. I absolutely despise that. I want my DNS to resolve domain names, nothing else. For blocking things I have Pi-Hole, which is under my control for that reason. I can blacklist or whitelist addresses to my needs, not to the whims of a corporation that wants to play gatekeeper to what I can browse.", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759617648, "item_id": 47476103, "url": "https://news.ycombinator.com/item?id=47476103", "by": "saaaaaam", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "", "excerpt": "I use cloudflare DNS because it\u2019s faster. But should I worry, having read your comment? What is the downside to using it? What would you recommend instead?", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759615200, "item_id": 47475950, "url": "https://news.ycombinator.com/item?id=47475950", "by": "Hamuko", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "", "excerpt": "The \"censored\" part of archive.today seems unrelated to the filtering itself. 1.1.1.3 flags Pornhub.com as \"EDE(17): Filtered\" but archive.today is \"EDE(16): Censored\". Supposedly it should be an external party that's requiring Cloudflare not to publish the DNS record. https://www.rfc-editor.org/rfc/rfc8914.html#name-extended-dns-error-code-16-", "context": "", "use_case": "unfiltered DNS resolver", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 749792176, "item_id": 46862011, "url": "https://news.ycombinator.com/item?id=46862011", "by": "sebst", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "we use to enable cloudflare DNS in front of AWS infra", "excerpt": "True, and there's nothing wrong with them. We still believe to have a more flexible solution that also adds some features, including combining multiple cloud providers which at the moment we use to enable cloudflare DNS in front of AWS infra. Feel free to give it a try!", "context": "", "use_case": "", "switched_from": "", "story": "Stelvio: Ship Python to AWS"}, {"id": 746987088, "item_id": 46686693, "url": "https://news.ycombinator.com/item?id=46686693", "by": "colmmacc", "date": "2026-01-19", "version": null, "stance": "warn", "quote": "incredibly poorly researched feature to just return CNAME records at a domain apex", "excerpt": "I am very petty about this one bug and have a very old axe to grind that this reminded me of! Way back in 2011 CloudFlare launched an incredibly poorly researched feature to just return CNAME records at a domain apex ... RFCs be damned. https://blog.cloudflare.com/zone-apex-naked-domain-root-domain-cname-supp/ , and I quote directly ... \"Never one to let a RFC stand in the way of a solution to a real problem, we're h", "context": "", "use_case": "", "switched_from": "", "story": "What came first: the CNAME or the A record?"}, {"id": 745039296, "item_id": 46564956, "url": "https://news.ycombinator.com/item?id=46564956", "by": "viktorcode", "date": "2026-01-10", "version": null, "stance": "recommend", "quote": "", "excerpt": "Want to mention that not all German ISPs participate in IP-infringing content blocking. I use one that does not.", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare CEO on the Italy Fines"}, {"id": 744955680, "item_id": 46559730, "url": "https://news.ycombinator.com/item?id=46559730", "by": "greyface-", "date": "2026-01-09", "version": null, "stance": "neutral", "quote": "Wasn't 1.1.1.1 explicitly created to help people in countries", "excerpt": "> Wasn't 1.1.1.1 explicitly created to help people in countries with government internet restrictions to get around them? No, it was explicitly created to receive and study the stream of \"garbage traffic\" being sent to 1.1.1.1 and 1.0.0.1, which were previously held by APNIC and donated to Cloudflare on this basis. https://blog.cloudflare.com/announcing-1111/ > APNIC's research group held the IP addresses 1.1.1.1 and", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare CEO on the Italy Fines"}, {"id": 744946880, "item_id": 46559180, "url": "https://news.ycombinator.com/item?id=46559180", "by": "riedel", "date": "2026-01-09", "version": null, "stance": "neutral", "quote": "Currently it is as nice registry for pirating sites for anyone using 1.1.1.1", "excerpt": "Judicial oversight took a while in Germany, but it is there now (but I guess you will always find an incompetent judge if you really want). I wonder if cloudflare would implement the German blocklist now that we have judicial oversight. Currently it is as nice registry for pirating sites for anyone using 1.1.1.1 [1] [1] https://cuiiliste.de/domains", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare CEO on the Italy Fines"}, {"id": 744904528, "item_id": 46556533, "url": "https://news.ycombinator.com/item?id=46556533", "by": "cubefox", "date": "2026-01-09", "version": null, "stance": "neutral", "quote": "Cloudflare argued that filtering its global 1.1.1.1 DNS resolver would be \"impossible\"", "excerpt": "More information: > Italy\u2019s communications regulator AGCOM imposed a record-breaking \u20ac14.2 million fine on Cloudflare after the company failed to implement the required piracy blocking measures. Cloudflare argued that filtering its global 1.1.1.1 DNS resolver would be \"impossible\" without hurting overall performance. AGCOM disagreed, noting that Cloudflare is not necessarily a neutral intermediary either. [...] https", "context": "", "use_case": "Public DNS resolver", "switched_from": "", "story": "Cloudflare CEO on the Italy Fines"}, {"id": 744724945, "item_id": 46545309, "url": "https://news.ycombinator.com/item?id=46545309", "by": "helloaltalt", "date": "2026-01-08", "version": null, "stance": "warn", "quote": "I don't think cf would work but still", "excerpt": "> Consequently, the actual means of blocking tends to be on an ISP basis: some will simply drop packets, some will have left certain endpoints open, some will leave international DNS open, etc etc. All that changes when activists notice, exploit the opening, and then the ISP finds out. And then sometimes the TIC (the gateway) will impose blanket limitations or throttling. Your international dns is interesting post, c", "context": "", "use_case": "", "switched_from": "", "story": "Iran Goes Into IPv6 Blackout"}, {"id": 743183312, "item_id": 46448957, "url": "https://news.ycombinator.com/item?id=46448957", "by": "nalekberov", "date": "2025-12-31", "version": null, "stance": "warn", "quote": "It's just another VC-backed company and 1.1.1.1 is a free service.", "excerpt": "> I use Cloudflare's DNS because I trust them more than other companies; purely based on their business and how their incentives align It's a very naive way of thinking about some businesses. What did Cloudflare do to earn this trust? It's just another VC-backed company and 1.1.1.1 is a free service. So Cloudflare is going to lose money just to protect my privacy? I don't think so.", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "On privacy and control"}, {"id": 741492033, "item_id": 46343252, "url": "https://news.ycombinator.com/item?id=46343252", "by": "raffraffraff", "date": "2025-12-21", "version": null, "stance": "neutral", "quote": "My domain runs on Cloudflare DNS", "excerpt": "This! I guess a good number of tech people will have IPv4 home networks long after their non-tech parents, neighbors and friends will be using IPv6 (without even knowing it). IPv4 in the home is dead easy. You only need to remember the last digit (unless you've got multiple networks, but most won't). You can ssh to any device by remembering that \".1\" is router, \".2\" is NAS etc. Firewalls are simple. You can buy a che", "context": "", "use_case": "Domain DNS hosting", "switched_from": "", "story": "I spent a week without IPv4 (2023)"}, {"id": 739791056, "item_id": 46236941, "url": "https://news.ycombinator.com/item?id=46236941", "by": "Bender", "date": "2025-12-11", "version": null, "stance": "warn", "quote": "Try changing your DNS to something other than Cloudflare", "excerpt": "More likely they have blocked your IP or DNS requests as I have been using it all day and all week. That said I do get more google craptchas now. Try changing your DNS to something other than Cloudflare if that is what you are using and flush browser DNS cache.", "context": "", "use_case": "", "switched_from": "", "story": null}, {"id": 734211632, "item_id": 45888227, "url": "https://news.ycombinator.com/item?id=45888227", "by": "OutOfHere", "date": "2025-11-11", "version": null, "stance": "warn", "quote": "I will never use Cloudflare.", "excerpt": "I will never use Cloudflare. I use NextDNS.", "context": "", "use_case": "", "switched_from": "", "story": "Colon cancer is rising in young people and scientists got a clue about why"}, {"id": 734022337, "item_id": 45876396, "url": "https://news.ycombinator.com/item?id=45876396", "by": "df0b9f169d54", "date": "2025-11-10", "version": null, "stance": "neutral", "quote": "Now I'm on quad1 :(", "excerpt": "I used quad9 as the primary upstream DNS for my home. about 11 days ago I wasn't able to send any query to quad9, kinda blocking. Their status page was green I suspected my ip was blocked. Now I'm on quad1 :(", "context": "", "use_case": "", "switched_from": "Quad9", "story": "DNS Provider Quad9 Sees Piracy Blocking Orders as \"Existential Threat\""}, {"id": 733476833, "item_id": 45842302, "url": "https://news.ycombinator.com/item?id=45842302", "by": "NelsonMinar", "date": "2025-11-06", "version": null, "stance": "warn", "quote": "That may be a Cloudflare DNS specific issue", "excerpt": "That may be a Cloudflare DNS specific issue, there's been a long standing dispute between archive.today and them about some DNS details. https://webapps.stackexchange.com/questions/135222/why-does-1-1-1-1-not-resolve-archive-is", "context": "", "use_case": "", "switched_from": "", "story": "FBI tries to unmask owner of archive.is"}, {"id": 733410720, "item_id": 45838170, "url": "https://news.ycombinator.com/item?id=45838170", "by": "winkelmann", "date": "2025-11-06", "version": null, "stance": "recommend", "quote": "I use Cloudflare's DNS and it works fine for me.", "excerpt": "This was fixed/changed at some point. I use Cloudflare's DNS and it works fine for me.", "context": "", "use_case": "", "switched_from": "", "story": "FBI tries to unmask owner of archive.is"}]}