this post was submitted on 10 Mar 2025

73 points (100.0% liked)

Buy European

3859 readers

2335 users here now

Overview:

The community to discuss buying European goods and services.

Matrix Chat

Rules:

Be kind to each other, and argue in good faith. No direct insults nor disrespectful and condescending comments.
Do not use this community to promote Nationalism/Euronationalism. This community is for discussing European products/services and news related to that. For other topics the following might be of interest:
Include a disclaimer at the bottom of the post if you're affiliated with the recommendation.

Feddit.uk's instance rules apply:

No racism, sexism, homophobia, transphobia or xenophobia
No incitement of violence or promotion of violent ideologies
No harassment, dogpiling or doxxing of other users
Do not share intentionally false or misleading information
Do not spam or abuse network features.
Alt accounts are permitted, but all accounts must list each other in their bios.

Benefits of Buying Local:

local investment, job creation, innovation, increased competition, more redundancy.

Related Communities:

Buy Local:

!buycanadian@lemmy.ca

!buyafrican@baraza.africa

!buyFromEU@lemm.ee

!buyfromeu@feddit.org

Buying and Selling:

!flohmarkt@lemmy.ca

Boycott:

!boycottus@lemmy.ca

Stop Publisher Kill Switch in Games Practice:

!stopkillinggames@lemm.ee

Banner credits: BYTEAlliance

founded 1 month ago

MODERATORS

buyeuropean@feddit.org

lazycog@feddit.uk

A free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union. (lemmy.zip)

submitted 1 week ago by Blaze@lemmy.zip to c/buyeuropean@feddit.uk

15 comments fedilink hide all child comments

cross-posted from: https://lemmy.ml/post/26984767

DNS0 EU

The European public DNS that makes your Internet safer.

A free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union.

all 19 comments

sorted by: hot top controversial new old

[–] ClassyHatter@sopuli.xyz 10 points 1 week ago

Quad9 is another European DNS service. It's Swiss-based.

[–] towerful@programming.dev 3 points 1 week ago (1 children)

Enter 193.110.81.0 as Preferred DNS.
Enter 185.253.5.0 as Alternate DNS.

Not quite as friendly as 8.8.8.8, 8.8.4.4, 1.1.1.1, 9.9.9.9 and so on

[–] Cheradenine@sh.itjust.works 1 points 1 week ago (2 children)

I'm not understanding your comment. Smaller numbers are friendlier?

Your examples of Google and Cloudflare are not European, nor privacy friendly, which seems to be the point of this post.

Quad9 is though.

[–] rmuk@feddit.uk 4 points 1 week ago (1 children)

"correct horse battery staple"

They're easy to remember, borderline unforgettable.

[–] Cheradenine@sh.itjust.works 2 points 1 week ago

Honest question. How often do you need to remember DNS addresses?

Last year I got a new router, looked up the address I wanted to use, copy/paste.

[–] towerful@programming.dev 3 points 1 week ago

No, but "four 8s" is easier to remember.
If they had a memorable IP, I'd use them in a heartbeat.
I'll put them on my network DNS resolver, but I'm probably still gonna use 8s. Especially since that's the resolver that LetsEncrypt uses exclusively

[–] brrt@sh.itjust.works 2 points 1 week ago

Mullvad is another option with content blockers: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls

[+] IZZI@lemm.ee 1 points 1 week ago* (last edited 1 day ago) (3 children)

[removed by mod]

[–] koper@feddit.nl 9 points 1 week ago (1 children)

The most important thing is to not go for options like Google (8.8.8.8) or Cloudflare (1.1.1.1), which a lot of techies default to.

Using your ISP's DNS is actually relatively okay, because they are quite well regulated by the GDPR and ePrivacy Directive (e.g. they cannot sell your traffic data or use it for advertising without proper freely-given consent) and you're already paying them so they don't need to sell your data to turn a profit. In most cases this configuration is good enough.

The remaining issues could be mass surveillance (some EU member states force ISP's to keep traffic logs for fighting crime). Switching to a third party NS recursor could work, but you would then have to trust them.

Or perhaps you want DNS over TLS or HTTPS, which not all ISPs offer. Without that, DNS is unencrypted so an wiretapper between you and your ISP could monitor what websites you visit. But such an attack isn't very likely to happen.

Lastly, some internet censorship is done by forcing ISP's to block domains at the DNS level. Using a different DNS recursor gets around that, as long as there are no more sophisticated blocks in place.

[–] ClassyHatter@sopuli.xyz 4 points 1 week ago (1 children)

One other thing what DNS service affects is how quickly webpages loads, especially nowadays when every webpage is full of advertisements. For example, if you try to load a webpage that consists of files on 10 different servers, your computer needs to send 10 DNS queries. If these queries happen sequentially (one query has to resolve, before the next is sent), and if each query takes 1 second, it would take at least 10 seconds for that page to load. If those queries instead resolve in 0.1 second each, that same page would load in about 1 second. GRC Domain Name Speed Benchmark is popular benchmarking tool for testing how fast your DNS service is.

[–] towerful@programming.dev 4 points 1 week ago (1 children)

A DNS is a Domain Name Server.
It is what translates lemm.ee into an IP address.

Perhaps you are thinking of VPN, or virtual private network?

[+] IZZI@lemm.ee 2 points 1 week ago* (last edited 1 day ago) (3 children)

[removed by mod]

[–] WasteWizard@lemmy.world 3 points 1 week ago

DNS gives your PC all the info on how to contact Domain Names like reddit.com or phtn.app. Your PC does that a lot and all the time. This connection is normally not verified or checked or encrypted. If you didn't touch your DNS configuration you probably use your provider's DNS server. So they know which services you use, which OS, where and when you go to which pages, and because there is no encryption anyone else may know or even change that, too. Instead of sending you directly to reddit.com a malicious entity might want to send you to another server first to do bad stuff. This is what makes it not secure.

[–] towerful@programming.dev 3 points 1 week ago

You can get a lot of metadata from DNS lookups.

Traditional DNS is just simple UDP. There is no authentication of authority.
There are actually DNS attacks where - if you are intercepting the traffic - you can reply faster than the actual DNS. At which point the client will trust whatever you return as it arrived first.
Indeed, that's how multiple DNS addresses work. Your computer will yeet a request to all configured DNS. First response gets used.

Also, as it's unencrypted, anyone that can snoop the traffic can see what domain names you are requesting.

There are a few standards that are working to solve this including DoH (DNS over HTTPS) and DoT (DNS over TLS).

[–] twix@infosec.pub 2 points 1 week ago

You can see a DNS server as a phone book for your computer. Your computer needs to seek a connection to an ip address to display a website for example. But you as a user only knows the url of the website. So your computers asks the dns server which ip address it should go to.