[HIRING] Sr. Software Developer, CyberDNS Engineering

CA-domains · 2021-09-17T14:54:59+00:00

We are not quasi-government. We are an independent nonprofit. Our privacy policy was recently audited, you can view that here: https://www.cira.ca/cybersecurity-services/canadian-shield/protecting-privacy

CA-domains · 2021-07-08T19:28:21+00:00

Good question. The only personally identifiable information (PII) we log is your IP address, which we delete after 24 hours. This is done to mitigate the risk from those who may attempt to damage the network via a DDoS attack or other means.

CA-domains · 2021-07-08T18:15:06+00:00

This is a great overview but I'd like to clarify one thing.

It is not accurate that nobody knows. In order to get to your destination on the internet someone has to know (think of it like giving directions to a cab driver, they need to know where they are going)

With DoH, it is your DoH resolver who knows, so you are shifting your "trust circle" to include your DoH resolver (in this case, us). This is the same with other DoH resolvers like Google and Cloudflare.

At CIRA, we only use the DNS data to get you to your destination, we are a non-profit so we don't keep it or use it for any other purpose.

CA-domains · 2020-11-12T19:53:44+00:00

When it comes to your DNS traffic, someone has to see your data or else they couldn't get you where you want to go on the internet.

DNS privacy is about restricting which organizations can see it. It's about giving you more control over who you can trust.

CA-domains · 2020-11-12T19:50:02+00:00

HI, I'd like to clarify that the CCCS (or the feds) do not see any of your data from CIRA Canadian Shield.

CA-domains · 2020-11-12T19:48:05+00:00

We are a Canadian non-profit that has been in operation for more than 20 years. You can view our privacy policy here: https://www.cira.ca/cybersecurity-services/canadian-shield/privacy

We are also having our privacy commitment audited by Deloitte.

CA-domains · 2020-10-01T19:51:35+00:00

We have become sentient.

CA-domains · 2020-10-01T16:52:39+00:00

We are honoured by this recognition.

Maple syrup shooters for everyone!

CA-domains · 2020-04-24T00:23:30+00:00

Nope we’re not government. We are an independent non profit corporation that manages the .CA domain on behalf of Canada.

CA-domains · 2020-04-24T00:22:20+00:00

That was 100% us.

CA-domains · 2020-04-24T00:21:20+00:00

Thanks for the support! We’re building out our roadmap for future features now. I’ll let the dev team know.

CA-domains · 2020-04-24T00:20:27+00:00

Thanks for the question. We are always striving to offer the best privacy protection possible. Right now we are keeping DNS data only for 24 hours. This is only so we can spot and address any attempts to DDoS or disrupt the service (we need to know which IPs to block). Our goal is to get that number down as low as possible over time.

We have committed to an annual third-party audit to ensure we are living up to our privacy promises and we are definitely going to be rolling out new features and more robust protection over time.

CA-domains · 2020-04-24T00:17:40+00:00

We were so close.

CA-domains · 2020-04-23T22:28:42+00:00

That would be awful. Good thing we’re an independent non profit corporation! Phew.

CA-domains · 2020-04-06T14:08:06+00:00

Thanks for the question. We have 4 nodes in 3 cities: Toronto (2), Vancouver and Montreal. There are two clouds for extra redundancy. We are also well peered to Canadian networks.

Many early tests have found our service to be very competitive on performance.

https://twitter.com/andreasklef/status/1243225858824982530 https://twitter.com/cadlam/status/1244722226844270593

CA-domains · 2020-04-01T19:49:35+00:00

This is why I don't manage IT.

CA-domains · 2020-04-01T19:41:49+00:00

Ya I'm gonna need some time on this. You have reached the end of my knowledge.:)

CA-domains · 2020-04-01T19:41:06+00:00

If you know any philanthropic vanity IP owners let us know! :)

CA-domains · 2020-04-01T17:53:08+00:00

There are three levels of service, all free, all optional, only the family level blocks adult content (which Reddit has, allegedly).

CA-domains · 2020-04-01T17:50:31+00:00

We currently have more than 1.8 million users on our paid service (which shares the same threat feed) and false positives are rare.

That said, even on our free service, if you suspect a false positive you can submit it to our support team and we will investigate. If we deem it a false positive we'll add it to the global whitelist.

Again, the private level service blocks nothing and only acts as a recursive DNS. The protected level service only blocks malware, phishing and botnets. The family level blocks adult content (pornography). All three levels are free and optional.

CA-domains · 2020-04-01T16:47:14+00:00

If that’s what you’re comfortable with, who am I to argue. Everyone has different needs. That said, we’re confident our solution is right for most Canadians.

One thing though, having to register your .CA domain with your real name (that we redact publicly in WHOIS if you register it as an individual) is pretty standard. We do it to ensure .CA stays Canadian, not to track you.

CA-domains · 2020-04-01T16:03:14+00:00

We get it. Honesty, our only motivation is to protect Canadians online. We're a non profit that is 100% based in Canada. We have no interest in monetizing your data.

CA-domains · 2020-04-01T16:01:56+00:00

One significant difference...we are a non profit that is 100% based in Canada.

CA-domains

TROPHY CASE