On: Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.1.1)

[ikeboy]

Besides, my reading is:

Every other resolver supports EDNS

Archive.is only works with resolvers that support EDNS

Cloudflare decided not to support EDNS

That itself is a defendable decision but I do feel for a popular site they could implement some sort of fix.

[Thorrez → ikeboy]

    dig @carl.archive.is archive.is A +noedns

responds 134.119.220.26

    curl http://134.119.220.26 -H 'Host: archive.is' -v

responds with HTML of the site.

I'm not a dig expert, but I believe this means it works without EDNS. I think that means archive.is is specifically blocking Cloudflare's servers, not blocking all non-EDNS requests.

[akerl_ → ikeboy]

Notably, Level3 and Hurricane Electric both appear to not use ECS, and archive.is resolves properly from those. Which seems to clarify that this isn’t a technical requirement for archive.is to work, it’s an intentional protest by the archive.is operators against Cloudflare.

[tambre → ikeboy]

Cloudflare does support EDNS. They just don't forward the client's subnet due to being privacy-oriented, doing which is optional and perfectly valid.

[wolco → ikeboy]

They need something that works for all sites.