I found the video quite unclear. What's the difference between Quad9 and the DNS server? Are both not DNS servers? Can the hacker not theoretically hack the Quad9 DNS just as well? I'm thinking DNSSEC has implications on DNS pointers etc which I was hoping to see mentioned, as they seem crucial in understanding how it actually works.
Sorry I wasn’t clear. Quad9 runs a DNS server. You have to have a DNS. The question is whether the one you use is trustworthy, reliable, preserves privacy and protects you from known bad actors/risky sites. Quad9 was created to do all of this. Most DNS servers don’t offer these capabilities
I wondered the same thing and based on Jeff's recommendations, switched a couple months ago. If there's a performance difference, I don't see it. I like the privacy protections of Quad9 and their non-profit status. Both my work laptop and home network are using Quad9; there's been no complaints from my family members, either.
But if your using an active directory network which depends on dns then you can't change the client side DNS or active directory will not work. You can point your AD dns forwarder to quad 9.
At first, no. But as reports come in to IBM’s X-Force (and others), that info informs the system and it will eventually end up on a block list and help protect everyone else who comes along later
It could … after all, anything is possible but considerable effort is put in by very talented and dedicated people to make sure it doesn’t. Bottom line is that it has proven over time (launched in 2017) to be reliable
Good question … we’ve found that the impact is imperceptible in most cases since DNS servers are located globally and traffic can be routed to the closest one
Anonymized, aggregated data can be used to essentially crowd source and serve as an early warning system that serves as protection for all. Think of it as being able to warn others when you discover that the bridge up ahead is out
Free security is good equitable security for all. Stay trustworthy and thanks for sharing your knowledge with us all. For free to boot.❤
Love the collab and conversation between these two.
I found the video quite unclear. What's the difference between Quad9 and the DNS server? Are both not DNS servers? Can the hacker not theoretically hack the Quad9 DNS just as well?
I'm thinking DNSSEC has implications on DNS pointers etc which I was hoping to see mentioned, as they seem crucial in understanding how it actually works.
Sorry I wasn’t clear. Quad9 runs a DNS server. You have to have a DNS. The question is whether the one you use is trustworthy, reliable, preserves privacy and protects you from known bad actors/risky sites. Quad9 was created to do all of this. Most DNS servers don’t offer these capabilities
I can't believe this video is freely available to everyone. Thank you so much!
Your link in the description does not let you show the guide on setting up quad9 dns?
This 9 IP Adress... greetings from another IBMer, and congratulations for these videos great initiative very didactical
Thank you. That's the information I was looking for.
😊
Thank you guys, very useful content
How does Quad9 fair in speed performance compared to Google or Cloudfare?
I wondered the same thing and based on Jeff's recommendations, switched a couple months ago. If there's a performance difference, I don't see it. I like the privacy protections of Quad9 and their non-profit status. Both my work laptop and home network are using Quad9; there's been no complaints from my family members, either.
Dan’s right. I suspect the performance impact will be imperceptible in most cases so comparisons to other services become moot
@@jeffcrume Got it. Thank you for the response!
Amazing video jeff as always !!
How is national security impacted relative to fake websites ?
But if your using an active directory network which depends on dns then you can't change the client side DNS or active directory will not work. You can point your AD dns forwarder to quad 9.
If you are using an AD, then you are not at home, that's a Business and should be created as such ;-)
5:13 Sounds like a duty!
How to make video hand writing like that?
Very useful! Thanks!
Am just wondering, based on which source one might say Swiss does not leak the data stored in it's territory?
The privacy laws in Switzerland are more strict than even the EU’s GDPR. This is why Quad9 intentionally chose to headquarter there.
yeah they are from US before the move@@jeffcrume
So if I will host a website on a public IP adress that was never vistied before, there is no chance that quad9 would recognized me as a threat right ?
Same question
At first, no. But as reports come in to IBM’s X-Force (and others), that info informs the system and it will eventually end up on a block list and help protect everyone else who comes along later
DNS poisoning could also happen with Quad9...
It could … after all, anything is possible but considerable effort is put in by very talented and dedicated people to make sure it doesn’t. Bottom line is that it has proven over time (launched in 2017) to be reliable
what about the performance
Good question … we’ve found that the impact is imperceptible in most cases since DNS servers are located globally and traffic can be routed to the closest one
And how does quad 9 resolve a domain ?
They have their own DNS server, you have to point your router to their servers to get your URL resolved into the server's IP.
Awesome 👌
...interesting however, one persons 'black list' is another's source for uncensored information.
Thanks privacy safely
Gentlemen. Switzerland is not in EU...
Sorry, I didn’t mean to imply that it was
@@jeffcrume no problem✌️😊
therefore much than that crucial
Any implications geopolitically to that fact ?
Thank you for this video 🙂
It's really easy to setup in Windows 11.
IPv6
2620:fe::fe
Cisco’s Umbrella
it is opendns
LOL. Non-profit. There's no such thing as "free lunch" in this world. Data is what big techs are after; it's your virtual-self.
Anonymized, aggregated data can be used to essentially crowd source and serve as an early warning system that serves as protection for all. Think of it as being able to warn others when you discover that the bridge up ahead is out
true but it depens on . they have 3 diff specs to choose