Running your own DNS server doesn’t do much, unless your users are polling that DNS server, or a DNS server that pulls from it. No large DNS provider is going to honor your random ass DNS servers mappings, and that’s a good thing.
And honestly, trusting some random DNS server isn’t a good idea. All it takes is one malicious entry and https://google.com suddenly loads in a cryptominer.
I think he means he’s running the name server for his zone (i.e. the authority for subdomains of his domains), which of course doesn’t help if the top level domain gets suspended and the NS record gets deleted.
Running your own DNS server doesn’t do much, unless your users are polling that DNS server, or a DNS server that pulls from it. No large DNS provider is going to honor your random ass DNS servers mappings, and that’s a good thing.
And honestly, trusting some random DNS server isn’t a good idea. All it takes is one malicious entry and https://google.com suddenly loads in a cryptominer.
I think he means he’s running the name server for his zone (i.e. the authority for subdomains of his domains), which of course doesn’t help if the top level domain gets suspended and the NS record gets deleted.
I’ve been running my own DNS for like two decades on a random ass IP
Yes, but my browser doesn’t give a fuck. As it should be for many reasons, including general security.
Your DNS only works for services/machines you have explicitly set to follow it, or devices under them in the network hierarchy.
That is nonsense. DNS is a federated system and my servers are authoritative for my domain.
For your domain, not other people’s domains. Are your servers authoritative for the top level domain you’re on?