Comment by rany_
Comment by rany_ 6 days ago
How does this "DNS trick" work? That to me is a much more interesting detail.
Comment by rany_ 6 days ago
How does this "DNS trick" work? That to me is a much more interesting detail.
> It likely overrides DNS resolution to CDN/POPs in countries which don't require age checking,
I don't understand what this means:
1. It resolves DNS requests - got it.
2. The resolution sends back an address to a CDN - okay, not sure that I got it
3. The resolved address is in a country which doesn't require age checking - Totally don't get it: how will this help?
They're (ab)using the EDNS Client Subnet feature:
Sure they can. When your browser resolves a host, they replace the actual IP with the IP of a proxy that is configured to forward traffic according to the Host HTTP header.
It likely overrides DNS resolution to CDN/POPs in countries which don't require age checking, or routes the traffic through TCP proxies so your traffic appears to come from a different country without these laws.
This will increase the latency of all traffic to that site though.