{"slug": "djbdns", "name": "djbdns", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 1, "commenters": 2, "warners": 0, "score": 1.096, "rising": -0.33, "first": "2025-12-01", "latest": "2026-08-17", "why": "", "why_is_quote": false, "has_verdict": false, "sentiment": {"recommend": 1, "neutral": 1, "compare": 0, "warn": 0}, "spark": [0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "listed": false, "loved": [], "caveat": "", "short_quote": "", "icon": false, "domain": null, "github_repo": null, "official_url": "", "pricing": "", "aliases": ["djbdns"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 737826513, "item_id": 46114157, "url": "https://news.ycombinator.com/item?id=46114157", "by": "Milpotel", "date": "2025-12-01", "stance": "recommend", "quote": "we used alternatives such as djbdns", "excerpt": "> I guess wikipedia doesn't agree with you: Are you kidding? Bind has been the de facto standard for DNS servers for ages but it's just a badly engineered piece of software and had braindead vulnerabilities for decades: https://www.cvedetails.com/vulnerability-list/vendor_id-64/product_id-144/ISC-Bind.html Already 20 years ago it was common knowledge to never use software that Paul Vixie had touched (bind, vixie-cron", "context": "", "use_case": "DNS server", "switched_from": "BIND", "story": "DNS Firewalling with MISP and Technitium DNS Server"}]}], "caveats": [], "who": [{"by": "1vuio0pswjnm7", "context": "small home setup", "url": "https://news.ycombinator.com/item?id=49329681", "date": "2026-08-17"}], "tags": [], "use_cases": ["local dns", "dns server"], "compared": [{"slug": "bind", "name": "BIND", "co": 1, "switched_from": 1, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49322107", "title": "Tell HN: Cloudflare silently injects its analytics when you switch nameservers", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46066736", "title": "DNS Firewalling with MISP and Technitium DNS Server", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"neutral": 1}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 789274898, "item_id": 49329681, "url": "https://news.ycombinator.com/item?id=49329681", "by": "1vuio0pswjnm7", "date": "2026-08-17", "stance": "neutral", "quote": "I have been using djbdns and a custom root.zone for a very long time", "excerpt": "NB. I actually do not encrypt then re-encrypt for the majority of HTTP requests I make I generate HTTP myself using own programs and connect to the localhost proxy using various TCP clients. The proxy does the encryption and remote connections not the client programs I process response bodies, using own software, into SQL, CSV, simple HTML or plain text This design isn't for everybody, but it's what I strongly prefer", "context": "small home setup", "use_case": "local DNS", "switched_from": "", "story": "Tell HN: Cloudflare silently injects its analytics when you switch nameservers"}, {"id": 737826513, "item_id": 46114157, "url": "https://news.ycombinator.com/item?id=46114157", "by": "Milpotel", "date": "2025-12-01", "stance": "recommend", "quote": "we used alternatives such as djbdns", "excerpt": "> I guess wikipedia doesn't agree with you: Are you kidding? Bind has been the de facto standard for DNS servers for ages but it's just a badly engineered piece of software and had braindead vulnerabilities for decades: https://www.cvedetails.com/vulnerability-list/vendor_id-64/product_id-144/ISC-Bind.html Already 20 years ago it was common knowledge to never use software that Paul Vixie had touched (bind, vixie-cron", "context": "", "use_case": "DNS server", "switched_from": "BIND", "story": "DNS Firewalling with MISP and Technitium DNS Server"}]}