Post

You can edit your nameservers using the at.marque.domain records Or edit your DNS using the at.marque.dns records Which allows for creating custom frontends, and implement Marque in other apps

and even then they are still public, just the ip is hidden

0 reposts2 likes

Correct me if I'm wrong... The records are, if you know what you're fetching, but not the entire collection. So, if I know that you have `dev.example.com`, can query for it. But, I won't know that you have `dev` unless I ask for it. Right? I've seen people abuse resolver cache - but still

Thanks for the link! That tool is pretty quick. Not that my hostnames are secret. Was just wondering about how atproto would make these things more easily discoverable. But, TIL that every TLS certificate issued is logged in public transparency logs. So it's all public anyway.

Just curious. I'm an old Linux admin. The only way to get a list of hostnames from Bind was to allow AXFR queries (off by default). Never considered the public TLS logs. Brute-forcing of course also an option.