You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/1.1.1.1/faq.mdx
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,7 @@ Computers are configured to talk to specific DNS resolvers, identified by IP add
28
28
Visit [1.1.1.1/help](https://one.one.one.one/help) to make sure your system is connected to 1.1.1.1 and that it is working.
29
29
30
30
31
-
## What do DNS resolvers do
31
+
## What do DNS resolvers do?
32
32
33
33
DNS resolvers are like address books for the Internet. They translate the name of places to addresses so that your browser can figure out how to get there. DNS resolvers do this by working backwards from the top until they find the website you are looking for.
34
34
@@ -52,7 +52,7 @@ Cloudflare [stopped supporting the ANY query](https://blog.cloudflare.com/deprec
52
52
1.1.1.1 is a DNSSEC validating resolver. 1.1.1.1 sends the `DO` (`DNSSEC OK`) bit on every query to convey to the authoritative server that it wishes to receive signed answers if available. 1.1.1.1 supports the signature algorithms specified in [Supported DNSKEY signature algorithms](/1.1.1.1/encryption/dnskey/).
53
53
54
54
55
-
## Does 1.1.1.1 send EDNS Client Subnet header
55
+
## Does 1.1.1.1 send EDNS Client Subnet header?
56
56
57
57
1.1.1.1 is a privacy centric resolver so it does not send any client IP information and does not send the <GlossaryTooltipterm="EDNS Client Subnet (ECS)">EDNS Client Subnet (ECS)</GlossaryTooltip> header to authoritative servers. The exception is the single Akamai debug domain `whoami.ds.akahelp.net` to aid in cross-provider debugging. However, Cloudflare does not send ECS to any of Akamai's production domains, such as `akamaihd.net` or similar.
58
58
@@ -62,22 +62,22 @@ Cloudflare [stopped supporting the ANY query](https://blog.cloudflare.com/deprec
62
62
1.1.1.1 has full IPv6 support.
63
63
64
64
65
-
## What is Purge Cache
65
+
## What is Purge Cache?
66
66
67
67
68
68
1.1.1.1's Purge Cache tool allows you to refresh 1.1.1.1's DNS cache for domain names. To refresh the cache for a domain name, visit the [Purge Cache page](https://one.one.one.one/purge-cache/).
69
69
70
70
71
-
## What is query name minimization
71
+
## What is query name minimization?
72
72
73
73
Cloudflare minimizes privacy leakage by only sending minimal query name to authoritative DNS servers. For example, if a client is looking for foo.bar.example.com, the only part of the query 1.1.1.1 discloses to .com is that we want to know who's responsible for example.com and the zone internals stay hidden.
74
74
75
75
76
-
## What are root hints
76
+
## What are root hints?
77
77
78
78
For decreased latency, reduced privacy leakage of queries and lower load on the DNS system, 1.1.1.1 upstreams to [locally hosted root zone files](https://blog.cloudflare.com/f-root/).
79
79
80
-
## Can IPs used by 1.1.1.1 be allowlisted
80
+
## Can IPs used by 1.1.1.1 be allowlisted?
81
81
82
82
Authoritative DNS providers may want to allowlist IP's 1.1.1.1 uses to query upstream DNS providers. The comprehensive list of IP's to allowlist is available at [https://www.cloudflare.com/ips/](https://www.cloudflare.com/ips/).
0 commit comments