00:09:24 as per DNSSEC stuff - some weird stuff happens with dns caching 00:09:42 my ubiquiti boxes only relay DNSSEC stuff when its not in their cache 00:10:16 i.e. if it knows about the entry, it doesn't relay DNSSEC stuff by default 00:10:26 theres a way around this, but I haven't bothered 00:10:41 kind of stopped my DANE/TLSA stuff for wallet2 a bit because it didn't always work like I wanted 00:11:14 I should probably still just push on that, and let everyone else do DNS caching stuff, but yikes 00:11:47 basically the patch allowed someone to set a DANE/TLSA entry instead of doing SSL cert signing stuff, but it got ruined with some routers 00:16:05 dsc_ selsta ^ 00:18:00 vtnerd__: perhaps most DNSSEC applications that use libunbound do *not* use this `ub_ctx_resolvconf()` that Monero uses, because often times it defaults to whatever is in /etc/resolv.conf, which is whatever the router pushed, and routers can be tricky resolving DNSSEC (?) 00:19:29 'routers can be tricky resolving DNSSEC' <== which is the ISP in most default cases 00:19:31 yeah if its using `/etc/resolv.conf` its probably using router pushed DHCP dns 00:19:45 yeah thats another issue 00:19:56 right 00:21:47 in my case it wasn't an ISP issue, it was the local router 00:22:15 the caching software by default doesn't store the relevant DNSSEC entries, so it only gets forwarded on first fetch, not on subsequent cached requests 00:22:40 you apparently have to set a specific config to do this sometimes iirc 00:23:43 well, at least Monero doesnt pull random DNS server out of its ass (which can be perceived as questionable behaviour), currently it is either 1) following resolv.conf 2) or manually supplying it an address - so maybe we should not fix anything at all 00:24:08 instead we need to wait till the router vendors fix their hardware :P 00:24:08 at the least I would try pointing it at your local ISP first to see ... 00:24:19 right 00:25:39 yeah I wouldn't hardcode a DNS server, because that would be considered a privacy leak unfortunately 01:14:39 funny - Alex Gladstein actually mentions Monero these days https://twitter.com/gladstein/status/1552026101110546432 01:21:39 How's that guy? 01:24:23 Who's* 01:24:58 head of Human Rights Foundation, claims to be a big privacy advocate but always pumps Bitcoin 01:25:43 tweets like the above shows he's finally acknowledging that Bitcoin privacy sucks and is beyond capability of ordinary users 01:26:28 there's also rumors that HRF is a CIA front, and they promoted BTC specifically because they know it's traceable 01:27:59 he's spent years saying Bitcoin privacy is great and nobody needs Monero or anything else 01:29:29 A shill, eh 01:29:33 or rather - he's spent years saying all you need is bitcoin, and ignoring everything else 01:30:13 a shill in a highly sensitive organization, supposedly protecting dissidents and other marginalized people 01:30:17 sometimes I also think those BTC maxis with huge social medai followings are following some questionable agendas because there is no other explanation for their stupidity and short sightedness 01:31:02 Well, Monero is the best chain out there, there's a limit to how long these people can ignore it. 01:31:38 Or conceal, if so they try. 01:31:41 yeah, the blinders are coming off 01:32:59 that thread is the 1st time I've seen him bring up Monero in a discussion 01:34:29 I was looking at the BTC marketcap vs XMR earlier today 01:35:05 its 150x bigger 01:35:24 we have some catching up to do still :P 01:36:03 yeah. but if we're hitting 20% of BTC's daily txns, I think that really means BTC is way over-valued 01:37:01 thats definitely some stats to be proud of :) 01:37:32 and keeping in mind that over 75% of BTC txns are mixers/tumblers and inter-exchange arbitrage, BTC's true utility is actually far less than XMR's 01:42:53 dsc_: And those Btcs are unlikely to move anytime son due to its deflationary and high fee nature. 01:42:58 soon* 02:53:17 See ya 16:49:59 Is it possible to set up a monero node that can only be accessed from your local network? 16:53:22 yes 16:54:26 I don't know how but it's definitely possible, I don't think it's difficult 16:55:10 You'd avoid forwarding data for that IP/port on your router. 16:56:12 Or if you're lucky and have two NICs, only one of which has access to the WAN, you'd bind to the other's IP. 17:06:25 Gotcha, so I'd basically follow a regular guide and skip router port-forwarding. That makes sense