alert Major DNS changes on Feb 1

[Paul]

DNS Flag Day is February 1, 2019--that's just two weeks one week from today. If your domain names use DNS servers that aren't ready, they'll be slow or entirely unavailable to a large percentage of the internet.

If you have multiple domain names with the same nameservers, you only need to test one in the group. For example, if half of your domains use GoDaddy's nameservers and another half use Dynadot's, you only need to test two domains, one for each provider.

Test your DNS provider's configuration here (simple) or here (technical).

Edit: Note that if these tests report "minor problems," there's no need for concern unless you operate the nameservers in question. Problems categorized as minor shouldn't cause immediate problems on Feb 1, but aren't ideal long-term. For example, in some cases, they might make it easier for attackers to abuse the affected nameservers.

 

[Furquan]

@Paul Buonopane is this related to the same thing.

 

[Nick]

...Uniregistry... - OK

However:

Minor problems detected!

This domain is going to work after the 2019 DNS flag day BUT it does not support the latest DNS standards. As a consequence this domain cannot support the latest security features and might be an easier target for network attackers than necessary, and might face other issues later on. We recommend your domain administrator to fix issues listed in the following
technical report https://ednscomp.isc.org/ednscomp/d8c39c8227

 

[cipcip]

Thank you to everyone who has tagged us in the thread, we don't have an update at this time unfortunately but our team are working on this and we will post an update as soon as we have some more information.

@Dynadot Will this be ready until Feb 1st? Or our websites will become not accessible for a while ?!

Thank you

 

[Rob Monster]

Folks,

Epik has no critical issues and will have zero issues before February 1. However, before February 1, we are also adding a few additional features for DNS resiliency as follows:

1. Resilient / Distributed DNS with full support for IPv6, DNSSEC, etc. This will go to all customers -- essentially adding Cloudflare/Anycast resiliency to any domain for free to customers who use Epik DNS.

2. A free VPN service and DNS resolver that is part of the framework for so-called "Unstoppable Domains" that resolve even when DNS fails. It is based on the industry best practice OpenDNS but uses a proprietary distributed Content Delivery Network. You can already retrieve the free VPN here:

https://anonymize.com/

Side note - Anonymize.com will become a full privacy suite, not just free WHOIS protection but also VPN, web proxy, and proxy search.

3. A no-track, resilient free DNS resolver which you can start using today instead of 8.8.8.8. Here it is:

DNS Server 1: 51.38.71.20
DNS Server 2: 192.99.212.40

Incidentally, if you use these DNS, even if the public DNS breaks, any domains using Epik DNS will continue to resolve normally.

Finally, I want to acknowledge the community and the registrars for getting the word out. I would like to know from Godaddy how they knew about this change well before most other registrars. Weird times.

 

[Jurgen Wolf]

No problems at all with cloudns.net
Status: OK

Ionos (1and1) is also OK.

 

[xynames]

Might be minor issues at some of these landing pages places like UnDeveloped etc. or at parking cos. but I doubt any major hosting company hostgator hostinger etc. is going to have any issues whatsoever.

 

[Paul]

Might be minor issues at some of these landing pages places like UnDeveloped etc. or at parking cos. but I doubt any major hosting company hostgator hostinger etc. is going to have any issues whatsoever.

You'd be surprised. The team behind DNS Flag Day did a very poor job of spreading the word. It was publicly announced almost a year ago, but little effort was made to ensure it received adequate attention. I only just found out about it recently.

@Paul Buonopane is this related to the same thing.

No, that's unrelated. If you see that again, please DM me with details or use the support widget in the bottom-right corner of the page. 502 doesn't always indicate this, but when it's a white page with "cloudflare" on it, it's a problem on Cloudflare's end.

 

[xynames]

Well I and clients of mine just tested websites hosted at hostgator and hostinger all came back A-Okay.

I tested the parking co. I use, and minor issues were there.

So, I really do think that the major hosting cos. are on top of this, but parking and the landing page only outfits might not yet be.

 

[Paul]

So, I really do think that the major hosting cos. are on top of this, but parking and the landing page only outfits might not yet be.

There are definitely a large number of major companies that are still noncompliant. I'm waiting on a report from a friend in the security industry to give exact numbers, but the spot testing I've done doesn't look promising.

 

[kashioz]

Tomorrow DNS changes Day on Feb 1

 

[wakguano]

...

 

[namezest]

Nice post even better all mine came up good A OKAY!