Safe DNS Search Engines like "Google" and Classification
Some domains are too broad in their classification that OpenDNS assigns a specific classification that overlaps all others.
One of the examples is "google.com", which is ranked "Search Engines" in spite of possible and influential classifications such as "Visual Search Engines" or "Video Sharing" that are embedded in the Domain code.
Another example is "bing.com", this much more expressive whose rank is "Search Engines" simply.
In this sequence, all types of content are allowed and OpenDNS guides users to configuration solutions in DNS management.
However, there are other domains that are in the same sequence, with blocking solutions by specialized DNS IPs (or CNAMEs), for which OpenDNS maintains community polls.
One of the glaring examples is Google's own domains (+ 100), which should all be ranked the same, but some are still in the polls.
Http://web.archive.org/web/20160521164613/https://www.google.com/supported_domains
This may allow some top-level domains to be inhibited and regardless of implementations that IT Admins do.
It would be good for OpenDNS to devote a little more attention, not to let domains such as "google.com.eg" be subject to votes, when the operating conditions are exactly the same as "google.com".
My suggestion will be the division between "Search Engines-Safe DNS" and "Search Engines-Unprotected" whose "Safe DNS" category would be validated by OpenDNS.
-
"whose "Safe DNS" category would be validated by OpenDNS."
OpenDNS has no control over the authoritative DNS configuration of other sites like Google or Bing. This configuration can change at any time without any notice. Therefore I do not think that OpenDNS has a way to cover this. However, it's already done by many search engine providers themselves:
https://support.opendns.com/hc/en-us/articles/227986807
This is the only way to go. However, it seems there are other DNS based service providers offering these search engines supplied Safe Search features with their (paid) services, especially the CNAME option. OpenDNS won't do it, because CNAME configuration would be the responsibility of authoritative DNS, not of recursive DNS as provided by OpenDNS.
OpenDNS try to increase your security level. Redirecting domains based on authoritative CNAME entries would significantly decrease security and safety, i.e. mixing authoritative and recursive DNS would be counterproductive to security and safety.
-
I apologize for my bad English, because it is not my mother language.
Possibly, I did not explain myself very well, because I am using a translator to explain my suggestions.
What I'm trying to point out is that there are certain top-level domains for which OpenDNS has concluded that the best way to deal with them, is to define them as "Search Engines" only, regardless of the capabilities they have in presenting content.
Subsequently, redirects users to the DNS Management solution for "IT Admins" as presented in Your article, in my view correctly.
https://support.opendns.com/hc/en-us/articles/227986807
For example "duckduckgo.com" has the same ability to implement DNS Safe Search, like "Google", "Youtube" and "Bing", however is in general vote for the community, here positive results can be harmful in the use of this domain.
https://duck.co/help/features/safe-search
https://domain.opendns.com/duckduckgo.com
The "yandex.com" is another demonstrative example of what I am referring to, at this time with the aggravation of having been positively classified as "Visual Search Engines" and therefore denied if a user makes use of this classification ("google.com" and "bing.com" will not).
https://dns.yandex.com/advanced
https://domain.opendns.com/yandex.com
Let's look at the "Bing" case where OpenDNS blocked the Polls because it considered it to have a "SafeSearch DNS" solution.
https://domain.opendns.com/bing.com
At OpenDNS there are distinct approaches to dealing with top-level domains that have certain characteristics (of course) and what I'm suggesting is that other domains (very few) are well evaluated in the same way.
In this list are all the top "Google" domains that are specific to each country, as listed below.
https://www.google.com/supported_domains
Finally, the last suggestion I would leave would be to divide these Domains with "SafeSearch DNS" solutions from others who do not have this capability. -
Hello,
I think that this theme that I put, has already highlighted the main themes that he would refer to.
I note that our thoughts in this tip of the "Idea Bank", has taken an orientation that gave rise to another suggestion, which I will expose and substantiate.
I consider this topic closed, because I believe in my next suggestion, this debate will be much more useful.
Thank you in advance for the comments of the user "Rotblitz" that were fundamental to my enlightened thinking.
Regards,
Leonel Cruz
Please sign in to leave a comment.
Comments
6 comments