Top all-time · #2917
PowerDNS Blog
Company blog · blog.powerdns.comsystemssecurity
PowerDNS Blog is the company blog at blog.powerdns.com, writing about systems and security. Since 2014, 26 different Hacker News readers have linked it 40 times, most often “Centralised DoH is bad for privacy”. It is still writing: the last post was on 2026-10-27, and you can follow it by feed.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers link the PowerDNS blog for analysis of DNS privacy and centralised DNS-over-HTTPS, and for DNSSEC and DNS resolver topics. Commenters cite its posts as support in those threads.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The PowerDNS Blog has content on all the latest news, launches, products and solutions of PowerDNS.
Most-linked posts?
- Centralised DoH is bad for privacy4 people · 4 mentions · first linked 2019-09-25
- Goodbye PowerDNS3 people · 3 mentions · first linked 2020-11-27
- DoH: Anti-Competitive and Network Neutrality Aspects3 people · 3 mentions · first linked 2019-12-03
- “The DNS Camel”, or, the rise in DNS complexity3 people · 3 mentions · first linked 2018-03-23
- Open Source Support: out in the open (2016)2 people · 2 mentions · first linked 2019-09-26
What Hacker News says?
yes you CAN if you wish of course. on the other hand nowadays 95% of domains on the Internet can be identified by IP[1][2]. so ISPs still have a pretty good guess what sites do you visit even without DNS or SNI data. [1] https://blog.powerdns.com/2019/09/25/centralised-doh-is-bad-... [2] https://blog.apnic.net/2019/08/23/what-can-you-learn-from-an...
Comment linking /2019/09/25/centralised-doh-is-bad-for-privacy-in-2019-and-beyond/
on “Improving DNS Privacy with Oblivious DoH”Submitted Goodbye PowerDNS as a story · 214 points
HN discussionHi! Author of that page here. Let me know your thoughts, or express your feelings in a pull request! https://github.com/ahupowerdns/hello-dns/ - you might also appreciate the DNS RFC viewer on https://powerdns.org/dns-camel . Finally, this all started based on this IETF presentation: https://blog.powerdns.com/2018/03/22/the-dns-camel-or-the-ri...
Comment linking /2018/03/22/the-dns-camel-or-the-rise-in-dns-complexit/
on “Hello, and welcome to DNS”Submitted Centralised DoH is bad for privacy as a story · 204 points
HN discussionQuite a good read but I think we killed his personal blog for now. I recommend this article on the site: https://blog.powerdns.com/2019/09/25/centralised-doh-is-bad-...
Comment linking /2019/09/25/centralised-doh-is-bad-for-privacy-in-2019-and-beyond/
on “Goodbye PowerDNS”Submitted How to talk to an open source project as a large scale or interesting user as a story · 171 points
HN discussionOne of the purported benefits of DoH, and especially of not using one's ISP's DNS servers, was privacy from authoritative governments. Some critics of DoH, and especially centralized DoH, said that it would not help; see "DoH for oppressive regimes": * https://blog.powerdns.com/2019/09/25/centralised-doh-is-bad-... See also Paul Vixie: * https://blog.apnic.net/2019/11/04/dns-wars/ Personally I prefer DoT: it allows…
Comment linking /2019/09/25/centralised-doh-is-bad-for-privacy-in-2019-and-beyond/
on “Kazakhstan government is intercepting HTTPS traffic in its capital (again)”Submitted The Big DNS Privacy Debate at FOSDEM as a story · 107 points
HN discussionPowerDNS got caught out too: https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6...
Comment linking /2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released
on “Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC”Submitted “The DNS Camel”, or, the rise in DNS complexity as a story · 76 points
HN discussionFrom the described mistakes two come from lack of understanding how exactly DNS works. But I agree it's in fact hard, see [1]). 1. "This strict DNS spec enforcement will reject a CNAME record at the apex of a zone (as per RFC-2181), including the APEX of a sub-delegated subdomain. This was the reason that customers using VPN providers were disproportionately" - This is non intuitive and maay people are surprised by…
Comment linking /2020/11/27/goodbye-dns-goodbye-powerdns/
on “The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout”Submitted DoH: Anti-Competitive and Network Neutrality Aspects as a story · 57 points
HN discussionA better criticism of DoH is here: https://blog.powerdns.com/2019/12/03/doh-anti-competitive-an... I just hate that it breaks Split Horizon which is totally legitimate. Leaking local-to-the-LAN queries onto the public internet is also a concern. IMO the right way to do this is to run your own local DNS recursive resolver, and deploy DNSCurve. This doesn't work for myopic browser vendors though...
Comment linking /2019/12/03/doh-anti-competitive-and-network-neutrality-aspects/
on “Migrate Everything from Linux to BSD”Submitted On Firefox moving DNS to a third party as a story · 53 points
HN discussion> in particular, you have no power to make the users polite. So very (and unfortunately) true. However they also have no power to make you do the thing they need straight away, or ever. > Even if you put hard work in it, you sacrifice a bit of your life. And this is bad. We need to move the needle away from this. It is incredibly exclusionary I am a younger person, no kids, in a job where I was able to negotiate for…
Comment linking /2016/01/18/open-source-support-out-in-the-open/
on “The secret life of open source developers [video]”Submitted Spoofing DNS with fragments as a story · 31 points
HN discussionTheir homepage is http://powerdns.net/ , not http://powerdns.com/; and yes they are incorporated as TriLab. Like I said, they're (PowerDNS application & TriLab) hosted on their own their own infrastructure, which is currently hosed. So basically, PowerDNS.COM BV is doing a public service to TriLab BV by putting up a notice. And of course, one is bound to lose politesse when held responsible for stuff one hasn't done…
Comment linking /2014/04/13/on-powerdns-com-and-express-powerdns-net-hosting-by-trilab/
on “PowerDNS.net down for more than 11 hours”Submitted Dnsdist: DNS, abuse- and DoS-aware query distribution for optimal performance as a story · 22 points
HN discussionSubmitted Bert Hubert: Goodbye DNS, Goodbye PowerDNS as a story · 7 points
HN discussionSubmitted Preparing for Post Quantum DNSSEC with PowerDNS as a story · 6 points
HN discussionSubmitted “The DNS Camel”, or, the rise in DNS complexity as a story · 5 points
HN discussionSubmitted DoH: (Anti-)Competitive and Network Neutrality Aspects as a story · 4 points
HN discussionSubmitted How PowerDNS Is Open Source and a Successful Business as a story · 4 points
HN discussionSubmitted PowerDNS Authoritative: Lua Records as a story · 3 points
HN discussionSubmitted Dnsdist 1.3.0 released as a story · 2 points
HN discussionSubmitted PowerDNS Authoritative Server 4.1 as a story · 2 points
HN discussionSubmitted PowerDNS Recursor 4.0.3 released as a story · 2 points
HN discussionSubmitted Welcome to PowerDNS 4.0.0! as a story · 2 points
HN discussionSubmitted PowerDNS and Open-Xchange agree to merge as a story · 2 points
HN discussionSubmitted How to talk to an open source software project as a large scale user (2014) as a story · 1 points
HN discussion
