Cloudflare TLS server not correct in DNS Privacy Protocol

[Darkling]

If i select in DNS Privacy Protocol Cloudflare DNS the domainname of the TLS server is not correct. The domainname in DNS Privacy Protocol is cloudflare-dns.com, but the domainname of the TLS serer is 1dot1dot1dot1.cloudflare-dns.com or one.one.one.one. Info is coming from here.

If i do a nslookup to cloudflare-dns.com the results are:
2606:4700::6810:f9f9
2606:4700::6810:f8f9
104.16.248.249
104.16.249.249

A nslookup to 1dot1dot1dot1.cloudflare-dns.com or one.one.one.one:
2606:4700:4700::1001
2606:4700:4700::1111
1.0.0.1
1.1.1.1

 

[TrebleTA]

This is my settings.

I then go to

1.1.1.1 â the Internetâs Fastest, Privacy-First DNS Resolver

âï¸âï¸ Browse a faster, more private internet.

1.1.1.1

And I get.

On a dns test it shows as cloudflare but will show there dns tree.

 

[Darkling]

I have no idea what Cloudflare Malware filter DNS had to to whit the problem i discribe? This is about the TLS hostname of 1.1.1.1 and 1.0.0.1

I will never use a DNS server that has any filter.

But if i nslookup security.cloudflare-dns.com i see:

Name: security.cloudflare-dns.com
Addresses: 2606:4700:4700::1112
2606:4700:4700::1002
1.0.0.2
1.1.1.2

This also shows that the TLS hostname for Cloudflare in the DNS Privacy Protocol is not correct.

 

[ColinTaylor]

Why DNS over TLS is so important, and if you are not using it you should be

I found an interesting statement: 01/27/22, 10:13 AM, Cloudflare reports that the domain cloudflare-dns.com is only used for certificate validation. Only the domains 1dot1dot1dot1.cloudflare-dns.com and one.one.one.one are intended for resolution via DNS-over-TLS. Source...

www.snbforums.com

 

[Darkling]

Why DNS over TLS is so important, and if you are not using it you should be

I found an interesting statement: 01/27/22, 10:13 AM, Cloudflare reports that the domain cloudflare-dns.com is only used for certificate validation. Only the domains 1dot1dot1dot1.cloudflare-dns.com and one.one.one.one are intended for resolution via DNS-over-TLS. Source...

www.snbforums.com

Thanks you for the link.

 

[bbunge]

If i select in DNS Privacy Protocol Cloudflare DNS the domainname of the TLS server is not correct. The domainname in DNS Privacy Protocol is cloudflare-dns.com, but the domainname of the TLS serer is 1dot1dot1dot1.cloudflare-dns.com or one.one.one.one. Info is coming from here.

If i do a nslookup to cloudflare-dns.com the results are:
2606:4700::6810:f9f9
2606:4700::6810:f8f9
104.16.248.249
104.16.249.249

A nslookup to 1dot1dot1dot1.cloudflare-dns.com or one.one.one.one:
2606:4700:4700::1001
2606:4700:4700::1111
1.0.0.1
1.1.1.1

Sorry but the preloaded settings are correct for DoT.

 

[bbunge]

This is my settings.
View attachment 43222

I then go to

1.1.1.1 â the Internetâs Fastest, Privacy-First DNS Resolver

âï¸âï¸ Browse a faster, more private internet.

1.1.1.1

And I get.
View attachment 43223

On a dns test it shows as cloudflare but will show there dns tree.

This is what I use, too. But you do not need the TLS port. Stubby/GetDNS uses port 853 by default.

 

[TrebleTA]

This is what I use, too. But you do not need the TLS port. Stubby/GetDNS uses port 853 by default.

aye, I just do it so it looks better