From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yh0-f41.google.com (mail-yh0-f41.google.com [209.85.213.41]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id D03A221F15E for ; Wed, 12 Mar 2014 04:15:28 -0700 (PDT) Received: by mail-yh0-f41.google.com with SMTP id v1so5373424yhn.0 for ; Wed, 12 Mar 2014 04:15:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=ZNEQwbgbh6wx4qTdD0uBXnEwR9z7lkJe6kRb0xkmUaI=; b=a1Gk9x/qAFY0g5ygfihqE3JM+k6Gc3AGIEITOFRKTFJkrRmyORVuWBU0LFXdzBO4yo ALLr+rLyKGIg/m0rOBO56uxHD7bxJ4mE7u7iE2NmkMfBIiGhVKna6BHjKV444Xn7j7Km mbsUw3fCzeshFZ59YR9TYGP9F/tQPTU3gHPa8hPobfV6v1qzgiGwTQt1vPGz9vZzg9zY ffIQd3Szwso558DsAjkuEBixPna4Xky3C9zEpX4gqG+Bfx/RfuFP0QvOoGGtx7faCOaw 7grPJ/K8JZDS/fU9C7TOQLNTFBcut90BtCT6Cqy+3utH3AkjJstWrQxAYGSvPBGbPAwm DDFQ== X-Gm-Message-State: ALoCoQk3HCe+42GJgJ+KgSHXTxAqUqD7lI7Y2sLzEswocHxtxufv+kKxJ2w+xFea8rrRdN1EfeVa MIME-Version: 1.0 X-Received: by 10.236.152.233 with SMTP id d69mr60270015yhk.11.1394622926996; Wed, 12 Mar 2014 04:15:26 -0700 (PDT) Received: by 10.170.140.215 with HTTP; Wed, 12 Mar 2014 04:15:26 -0700 (PDT) X-Originating-IP: [213.189.36.98] Date: Wed, 12 Mar 2014 12:15:26 +0100 Message-ID: From: Maciej Soltysiak To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=UTF-8 Subject: [Cerowrt-devel] comcast DNS X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Mar 2014 11:15:29 -0000 Story on Comcast DNS providing wrong DNS queries: http://beta.slashdot.org/story/199271 One day ISPs might start mangling 3rd party responses. Unless you use DNSCrypt, for which there is an OpenWRT package which works nicely with dnsmasq on Cero. Some people have asked for it on this ML. Maybe it could be a security angle for a cero release? Best regards, Maciej