NextDNS logging is opt-out, not opt-in as stated on PG's DNS Resolvers recommendations page

[ignoramous]

@dngray

I think at the point you’re trusting NextDNS to do logging, it really doesn’t matter what platform they use.

Except that’s not what the PrivacyGuides website points out. It specifically calls out storage location without mentioning that logs are streamed worldwide via BigCloud:

- You can choose retention time and log storage location for any logs you choose to keep, or disable logs altogether.
+ You can choose retention time and log storage location for any logs you choose to keep, or disable logs altogether.
+ The only way to access the logs is either via nextdns.io dashboard which streams them over Cloudflare or via their API which uses (GCP/AWS?), and it is possible these providers have access to your logs in plaintext.

@dngray

I was referring the comments about the number of requests per year processed by Rethink DNS, the resolver.

We are public about it; for ex, a graph from our Cloudflare account that runs sky.rethinkdns.com: https://twitter.com/rethinkdns/status/1753126031148662830

@dngray

and the NDA thing

You might want to go back a few replies and read what you wrote: I have unfortunately noticed a theme with quite a few of your replies which have an element of argument from authority Please stop gaslighting me on top of calling me dishonest / insinuating that I can’t prove my claims.

@dngray

These really don’t have any relevance to the discussion.

The relevance is for PrivacyGuides to do due diligence on dns0.eu before recommending it as “no logs”. Jonah gets that and created a github issue for it. So, it did have relevance.

@dngray

That is what people are going to really care about when they use these services.

Depends on the people and the threat model. If they trust PrivacyGuides and see “no logs” (a very strong guarantee), then they assume there’s absolutely no logs. I mean, words mean things. There’s a reason Mullvad goes to the extent they do with diskless servers, verified boot, no remote shell (which they’re working towards etc). To lump, Mullvad’s DNS as “no logs” in the same breath as other DNSes is really being disingenuous, imo.

@dngray

That could be a simple integer value assigned with an account. Technically still no logging if they’re not keeping the contents of the query ie which domain.

More assumptions, and just a few comments ago, you accuse me of speculation? My only point was, why not ask them instead? If they won’t reply, why make your own assumptions? Is recommending a service more important than recommending a good one? What’s PrivacyGuides charter? Also, I find it weird someone would defend something they’re not affliated with to the extent you are, because I genuinely feel you’re not addressing the specific points I am making at all, and going off on some tangent about how absurd it is to demand “no logs” from DNS providers.