Cloudflare and Google DNS JSON Answers Can Differ, Due to Subnet and DNSSEC Settings
A DNS lookup can return different addresses depending on the resolver used, and the JSON responses from Cloudflare and Google's DNS-over-HTTPS services reveal why. Google applies EDNS Client Subnet by default, so CDN answers may vary with the subnet specified, while Cloudflare does not send that information. The authenticated-data flag only behaves consistently when the DO bit is set, and SERVFAIL responses need Extended DNS Error codes to determine the cause. The article's measurements were taken on specific dates and inputs, so the examples describe those runs rather than general rules.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in