I've used FreeDNS on occasion for test domain names, one-off experiments, and similar. I'm very appreciative this exists, but there are some pain points that similar services handle better.
The domains are missing from the public suffix list. This impacts how cookies are handled by the domain names, with concerns the browser will allow software to set the cookie on the shared domain name instead of the subdomain. This can be a security problem. Getting added to the PSL may not happen: https://github.com/publicsuffix/list/pull/79
It can be difficult to get a free HTTPS certificate for your subdomain. Let's Encrypt applies per-domain name rate limits and these domain names see lots of issuance requests. There's a process to lift those limits, but last I checked FreeDNS didn't use it. You can still, of course, pay for a certificate.
There's tons of abuse on free domains so you may find that your domain is blocked on various lists.
Here are some compelling alternatives I use now, which manage these issues better:
See, before the cloud, you used to deploy your code to actual physical servers. If your site became really popular you needed more than one server to run it.
Before commercial and open source load balancers became a thing we literally used HTTP redirects to distribute load. You might visit www.example.com and get redirected to www13.example.com, which was an actual box in a datacenter.
I don't think the internet would exist today if websites just randomly fell over once the number of simultaneous users exceeded the capacity of a single server.
When I was at yahoo, we certainly had load balancers, but we didn't have super fancy load balancers that could separate traffic out by path, so each 'property' would use a different hostname (i worked on travel.yahoo.com, which is dead these many years), but we all shared a login cookie (and some other cookies).
We'd have certainly adapted if we couldn't share cookies, but it would have been a lot messier.
One of the complications that gets discussed is that there are way too many use cases with different requirements on what it means for domains to be related. The cookie problem is something browsers need to solve, so its perhaps reasonable that Mozilla (and volunteers) manage a list that focuses on that user case. But that's poorly suited for other use cases.
There's a lot of people thinking about this though. One somewhat related example is https://datatracker.ietf.org/doc/draft-manelidis-dnsop-domai..., which has a double-opt-in DNS TXT record mechanism. That draft and forthcoming discussions on the mailing list are a good place to understand the complexities here.
If, for example, you could trick a client into thinking "com" was not a public suffix, then from malicious.com you could set cookies on paypal.com
DNSSEC is not widely deployed, and so we cannot rely on the authenticity of DNS.
Maybe if we had DNSSEC, then we could rely on it for publicsuffix. Maybe lots of others things could be more easily solved if we had that too.
DNSSEC automation is coming, e.g. https://www.rfc-editor.org/info/rfc10026/. It might never become mainstream, but don't let anyone tell you that we couldn't benefit from having DNS authenticity!
> Let's Encrypt applies per-domain name rate limits and these domain names see lots of issuance requests. There's a process to lift those limits.
I'm familiar with the process to lift those limits, and Let's Encrypt has been amenable to bumping the certs as high as 250,000 but balked at 500,000, saying, "This is too large for us to support"
(I run a DNS service nip.io / sslip.io, and lots of my users request certs, so I'm always bumping into the limits)
One thing has changed. At some point, they introduced the 'shared management queue', and any random person can attach a subdomain to my domains, and apparently I have to explicitly deny these. Until then, scammers can create a subdomain on my domain, point it to whatever IP they want, and use it for their nefarious purposes.
I get that I'm a freeloader: I haven't paid for FreeDNS, so I can't complain much. But this seems like a terrible 'feature'. If I were a pro subscriber, my domains would be private and therefore not available for scammers to use. I've migrated all but one of my domains away from the service (they were all trivially easy - just haven't finished the last one).
20+-year long user here, not an issue once. Josh replied to emails then and replies today still. Let's just hope there's someone to continue should something happen to him (chosen diety forbid).
You're conflating two different concepts: DNS hosting, and DNS resolving.
This service seems to offer hosting services, i.e. publishing your domain's records in the DNS in DNS authoritative servers.
A DNS resolution service looks up and maintains large caches of DNS data on your behalf, optimizing DNS lookups by not requiring your own device to recursively query many different DNS servers. These lookups start by querying the DNS root zone, which is published by the DNS's authoritative servers which are listed in the root hints file.
This looks so much like https://dns.he.net/ that it seems to me it can’t be a coincidence. Is this a case of copying a well known design or is there more to it?
omg, invoking php-nuke brings me back. fun era (recent php2shell wild ride notwithstanding). Honestly it's more like web 1.5 - not straight up hand written html but no wild client side stuff either.
And yes, there absolutely was a "look" that's a product of the technology of the time - tables for design, limited styling / js support, php "components" that you could load and replace as part of your portal, and "themes".
My online diary started with PHP-Nuke. Then went to PostNuke for many years. Then to Drupal, where it still is. 26 years of content hehe. (Wish I’d picked Wordpress instead of Drupal but too many links to change now)
I wouldn't think much of it. It was a popular design trend for a while there; some just never updated. I don't blame them, it's fairly decent on readability and minimalism.
afraid.org has been there offering free DNS hosting since the year 2000, 26 years
Whilst it would be nice to know their contingency and continuity plans, I feel like their history is a better indicator of the future than just a bunch of feel-good words that you'd likely find a way to interpret pesssimisticly anyway.
I'm super grateful for free projects, but people gotta understand that depending on the type of project users still need some kind of guarantees before they can invest time in them. And this has nothing to do with "being pessimistic". And if maintainers can give good answers to such questions, then this will only make their project stronger and everybody more happy.
8organicbits 11 hours ago
The domains are missing from the public suffix list. This impacts how cookies are handled by the domain names, with concerns the browser will allow software to set the cookie on the shared domain name instead of the subdomain. This can be a security problem. Getting added to the PSL may not happen: https://github.com/publicsuffix/list/pull/79
It can be difficult to get a free HTTPS certificate for your subdomain. Let's Encrypt applies per-domain name rate limits and these domain names see lots of issuance requests. There's a process to lift those limits, but last I checked FreeDNS didn't use it. You can still, of course, pay for a certificate.
There's tons of abuse on free domains so you may find that your domain is blocked on various lists.
Here are some compelling alternatives I use now, which manage these issues better:
- https://messwithdns.net/ - Exceptionally well-made DNS console for learning DNS
- https://open-domains.com/ - Uses Cloudflare, great Discord group
- Even more: https://free.hrsn.dev/#/?id=domains
turblety 11 hours ago
cortesoft 6 hours ago
mike_d 47 minutes ago
See, before the cloud, you used to deploy your code to actual physical servers. If your site became really popular you needed more than one server to run it.
Before commercial and open source load balancers became a thing we literally used HTTP redirects to distribute load. You might visit www.example.com and get redirected to www13.example.com, which was an actual box in a datacenter.
I don't think the internet would exist today if websites just randomly fell over once the number of simultaneous users exceeded the capacity of a single server.
toast0 3 minutes ago
We'd have certainly adapted if we couldn't share cookies, but it would have been a lot messier.
8organicbits 9 hours ago
There's a lot of people thinking about this though. One somewhat related example is https://datatracker.ietf.org/doc/draft-manelidis-dnsop-domai..., which has a double-opt-in DNS TXT record mechanism. That draft and forthcoming discussions on the mailing list are a good place to understand the complexities here.
clivedup 6 hours ago
DNSSEC is not widely deployed, and so we cannot rely on the authenticity of DNS.
Maybe if we had DNSSEC, then we could rely on it for publicsuffix. Maybe lots of others things could be more easily solved if we had that too.
DNSSEC automation is coming, e.g. https://www.rfc-editor.org/info/rfc10026/. It might never become mainstream, but don't let anyone tell you that we couldn't benefit from having DNS authenticity!
bombcar 10 hours ago
quesera 9 hours ago
brian_cunnie 4 hours ago
I'm familiar with the process to lift those limits, and Let's Encrypt has been amenable to bumping the certs as high as 250,000 but balked at 500,000, saying, "This is too large for us to support"
(I run a DNS service nip.io / sslip.io, and lots of my users request certs, so I'm always bumping into the limits)
hattmall 13 hours ago
mynameisash 3 hours ago
One thing has changed. At some point, they introduced the 'shared management queue', and any random person can attach a subdomain to my domains, and apparently I have to explicitly deny these. Until then, scammers can create a subdomain on my domain, point it to whatever IP they want, and use it for their nefarious purposes.
I get that I'm a freeloader: I haven't paid for FreeDNS, so I can't complain much. But this seems like a terrible 'feature'. If I were a pro subscriber, my domains would be private and therefore not available for scammers to use. I've migrated all but one of my domains away from the service (they were all trivially easy - just haven't finished the last one).
wowczarek 3 hours ago
itsamario 12 hours ago
Why doesn't everyone just use their IANA resolvers?
kijeda 11 hours ago
This service seems to offer hosting services, i.e. publishing your domain's records in the DNS in DNS authoritative servers.
A DNS resolution service looks up and maintains large caches of DNS data on your behalf, optimizing DNS lookups by not requiring your own device to recursively query many different DNS servers. These lookups start by querying the DNS root zone, which is published by the DNS's authoritative servers which are listed in the root hints file.
denkmoon 6 hours ago
tylerius 12 hours ago
https://nic.eu.org/ is also very cool for getting a domain name if paying for one is a challenge.
upcoming-sesame 12 hours ago
IgorPartola 13 hours ago
garaetjjte 12 hours ago
cbg0 12 hours ago
makmanalp 12 hours ago
And yes, there absolutely was a "look" that's a product of the technology of the time - tables for design, limited styling / js support, php "components" that you could load and replace as part of your portal, and "themes".
baq 11 hours ago
we lost so much with SPAs and js everywhere.
htmx will save us!
muppetman 9 hours ago
brnt 12 hours ago
There's a name I haven't heard in a while!
reneberlin 10 hours ago
jstanley 13 hours ago
srik 13 hours ago
baq 13 hours ago
tracker1 12 hours ago
amelius 13 hours ago
How well is continuation guaranteed?
What if someone buys them? Or the maintainer stops for whatever reason?
gertop 12 hours ago
Whilst it would be nice to know their contingency and continuity plans, I feel like their history is a better indicator of the future than just a bunch of feel-good words that you'd likely find a way to interpret pesssimisticly anyway.
jrmg 12 hours ago
amelius 10 hours ago
Wolfbeta 10 hours ago
Do you hear yourself?
bombcar 10 hours ago