New Update Osprey Browser Protection discussion and updates

I have written permission from Control D's owner himself... They are an Official Partner of the project, meaning they approve the usage of their services in Osprey. You have no idea what you are talking about. Please, check your house for a gas leak.
Proove it ! have a valid pdf paper or an email screenshot (and you can mask what is confidential of course).
and thank you i check it every month, no problem for me ^^
 
No this is not free -> control D is only free for personnal usage not for cloud usage with a third party app.
Actually, @Foulest didn't do anything wrong regarding ControlD, even if he didn't ask them for permission to use their free DNS service.

First, ControlD made their DNS-over-HTTPS public and available for anyone to use. Doesn't matter if you're an individual or business entity, you're free to use their free DNS service as much as you'd like. Even if they limited free DNS service for private use only, it's not possible for them to distinct personal from business DNS queries. DNS query is a DNS query; it doesn't carry a label.
If ControlD free DNS service was meant to be used for personal use, their DNS-over-HTTPS addresses wouldn't be public and you'd need an account in order to use it which isn't the case.

Second, what extension does is no different than opening a browser and typing "malwaretips.com". Whenever you do that, your web browser contacts your DNS server and waits for the response. Osprey does exactly the same but at bigger scale (instead of asking one provider, it asks multiple). You want to visit "malwaretips.com" , Osprey checks with multiple DNS servers if you'll get correct IP address or 0.0.0.0 and that indicates website is blocked for some reason.

When this project started, I warned that @Foulest would have to remove some providers sooner or later. And that happened, because some of the services extension queried (like Bitdefender Traffic Light and Microsoft Smartscren) don't have their domains or API available publicly for use. But he has every right to keep and question any publicly available DNS server and doesn't need a permission for that.
 
Actually, @Foulest didn't do anything wrong regarding ControlD, even if he didn't ask them for permission to use their free DNS service.

First, ControlD made their DNS-over-HTTPS public and available for anyone to use. Doesn't matter if you're an individual or business entity, you're free to use their free DNS service as much as you'd like. Even if they limited free DNS service for private use only, it's not possible for them to distinct personal from business DNS queries. DNS query is a DNS query; it doesn't carry a label.
If ControlD free DNS service was meant to be used for personal use, their DNS-over-HTTPS addresses wouldn't be public and you'd need an account in order to use it which isn't the case.

Second, what extension does is no different than opening a browser and typing "malwaretips.com". Whenever you do that, your web browser contacts your DNS server and waits for the response. Osprey does exactly the same but at bigger scale (instead of asking one provider, it asks multiple). You want to visit "malwaretips.com" , Osprey checks with multiple DNS servers if they'll get correct IP address or 0.0.0.0 and that indicates website is blocked for some reason.

When this project started, I warned that @Foulest would have to remove some providers sooner or later. And that happened, because some of the domains extension queried (like Bitdefender Traffic Light and Microsoft Smartscren) don't have their domains or API available to public for use. But he has every right to keep and question any publicly available DNS server and doesn't need a permission for that.
What about ressource usage of power plan in a cloud envirronement by multiple users ?
think about it, french friend.
 
What about ressource usage of power plan in a cloud envirronement by multiple users ?
think about it, french friend.
What about it?

Anyone is free to use ControlD. It's in their best interest that people use their service, this is literally why they gave it away for free. I can set it to as many internet-connected devices as I want, even recommend it to friends.

Btw I'm not French.
 
What about it?

Anyone is free to use ControlD. It's in their best interest that people use their service, this is literally why they gave it away for free and I can set it to as many internet-connected devices as I want, even recommend it to friends.

Btw I'm not French.
mais tu parle français quand même, j'ai pas parlé de ton pays.

i am waiting the proof of foulest, than i will reach control D and you will see a miss understanding of how to configure it for a free service (that is not allowed by a cloud managing from OSprey side not Control D side, that is why the Client Control d dns is running slowly (it take a lot of resource usage)

more info at :

Free DNS Servers - Anonymize Your Internet (third parties)
 
Last edited:
mais tu parle français quand même, j'ai pas parlé de ton pays.

i am waiting the proof of foulest, than i will reach control D and you will see a miss understanding of how to configure it for a free service (that is not allowed by a cloud managing from OSprey side not Control D side, that is why the Client Control d dns is running slowly (it take a lot of resource usage)

more info at :

Free DNS Servers - Anonymize Your Internet (third parties)
bro-just-typing-#####-atm.gif
 
I don't owe you anything, respectfully.
a55245e9-fb43-4e22-8b27-614b09f166ec -> identification (.png)

You
i have a question BARRY
10:39 PM
Barry
Hit me with your question! What do you need help with regarding Control D?
10:39 PM
You
is conntrol d free for every one ? for example just an unfiltered secure configuration ?
10:40 PM
Barry
Yes, Control D offers free DNS resolvers for everyone! You can use an unfiltered, secure configuration without creating an account. Just pick the “Unfiltered” option from the Free DNS page, and you’ll find both Legacy DNS (IPv4) and Secure DNS options (DNS-over-HTTPS and DNS-over-TLS). No sign-up necessary—just configure and go!
10:40 PM
You
ok now my question is more complicated, what about a third party app wich give us a direct permission to request without the app, for 100 users in the same connexion ?
10:41 PM
Barry
If you want 100 users on the same connection to use Control D without configuring each device individually—for example, via a third-party app or just the network itself—you have a couple of options:
  1. Router-Level Setup: You can set Control D DNS resolvers on your router. This way, all devices on the network automatically use Control D—no app needed on each device.
  2. Organization Account for Large Setups: If you’re managing 100+ users, an Organization account is best. It comes with features for bulk management, analytics, and device provisioning suited for many users.
  3. App Integration/Automation: If the third-party app you mention can set DNS for all users/devices by itself, you just need to provide the right Control D resolver details. With paid endpoints and Secure DNS, you get more flexibility and features, but free DNS also works if filtering/customization is not required.
If you’re planning this for a business/organization, let me know, and I can guide you on setup or details about bulk access and organization licensing!
10:41 PM
You
someone is managing more than 100 users yes, i see it on mozzilla network, but do the manager of this third party app need to have a liscence or api key to provide such big setup.
10:44 PM
Barry
If someone is managing more than 100 users with unique access or custom filtering (beyond just free unfiltered DNS), they will need an Organization account with Control D. This account allows centralized management, analytics, and bulk provisioning, and it's billed based on the number of connected devices.
To offer advanced features or custom profiles through your own app or service, the manager would need an Organization plan and would generate API tokens if any integration is required. Free DNS—like the public unfiltered resolver—does not require any license or API key, but it offers no customization or analytics.
Bottom line:
  • Public/free DNS = no license or key needed, but limited features
  • Advanced setup (custom filters, logs, control, API use) = Organization license required
Let me know if you want more info about Organization accounts or bulk setup!
10:44 PM
You
ok but if he is managing so much user , who is responsible for there private data ?
10:45 PM
Barry
With Control D, privacy is a top priority. For public/free DNS, Control D does not log or store DNS queries or IPs, so there’s no user data held—nobody can access what isn’t collected.
If an Organization account is used, privacy depends on the analytics options enabled:
  • No analytics: Control D logs nothing, just like free DNS.
  • With analytics: Data can be stored and seen by organization admins and select Control D staff (but only when necessary, e.g., troubleshooting at the user's request).
Ultimately:
  • For free DNS, there’s nothing logged, so privacy is strong.
  • For managed/organization setups, the admin controls what’s logged, and both the organization and Control D are responsible for any stored data. Control D is SOC2 Type 2 compliant.
More privacy details are found here: Privacy Policy.
10:45 PM
You
ok but what about a ressource usage ? who pay it for this ?
10:46 PM
Barry
For resource usage:
  • Free DNS: Control D covers all costs—there’s no charge for users or the manager, but features are limited and there’s no guarantee of support or advanced configuration.
  • Organization or Personal accounts: The person or entity managing the account pays for the connected devices according to the plan. Control D charges based on usage (number of devices/endpoints).
So, if a manager is using just the free DNS, Control D absorbs the resource cost. If they want premium features, custom policies, or analytics—then they pay for what’s used. Full pricing for organizations is on this page.
10:47 PM
You
what cover free dns exactly ?
10:47 PM
Barry
Free DNS from Control D gives you:
  • DNS filtering options (like blocking malware, ads, trackers, adult content, social, or choosing unfiltered)
  • No account required—public access for anyone
  • Fast, low-latency Anycast network
  • Zero logging or storage of DNS queries or IP addresses
  • Both Legacy DNS (IPv4) and Secure DNS protocols (DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC)
But you don’t get:
  • Access to the Control D dashboard/web panel
  • Custom rules or advanced filters
  • Analytics, logs, or per-device control
You pick a public resolver from the Free DNS page and set it on your device or network, and that’s it!
10:47 PM
You
so all the fault goes to the manager of this 100 users for a free dns service if he is not your official partner ?
10:48 PM
Barry
If someone sets up Control D’s free DNS on a network for 100 users, Control D simply acts as the DNS resolver and provides the same level of filtering and privacy to everyone. However, because Control D’s free DNS does not log, track, or store user data, there’s little risk regarding privacy or data leaks.
The network manager is responsible for any local network policies, but since no logs or analytics are kept or shared by Control D, there’s nothing for them—or anyone else—to misuse from the DNS side. Control D is not officially involved in how that manager uses the DNS, and only provides the infrastructure.
If you want official management/oversight features, you’d need an Organization account. Otherwise, with free DNS, Control D is just providing a public, filterable DNS service for anyone—no partnership or extra responsibility on our end.

10:49 PM
You
ok, could you bring me our converssation on a email for just having a trace logs ?
10:50 PM
Barry
I can’t send emails or export this conversation directly for you, but you can easily copy and paste our chat into your email or notes for your own records. Just highlight the text, copy it, and then paste it where you want to keep your trace logs.
If you need any official documentation, let me know what you’re looking for and I’ll point you to the right resource!
10:50 PM

Scrren schot next for the end of the converssation.

Token if peoples want to verify.png


@Foulest Now since you have more than 100 users prove you have an official partner ship, thanks.
 
Let's clear something first... you do know how DNS works? Right?

Because what you're writing strongly indicates you have no idea what DNS is, how it works and what the ControlD service actually is. You should learn about the topic before you try to discuss anything with us.

By the way, I asked Barry as well. Turns out we're right and you are wrong!

Screenshot_1.png
 
Let's clear something first... you do know how DNS works? Right?

Because what you're writing strongly indicates you have no idea what DNS is, how it works and what the ControlD service actually is. You should learn about the topic before you try to discuss anything with us.

By the way, I asked Barry as well. Turns out we're right and you are wrong!

View attachment 289950
yes i do, and you do not managing more than 100 users @Marko :), so this topic is not for you, it's for @Foulest , he need to say that he is responsible from what poeple do when they use Control D, if he want to continue to developping something, or send to us alternatively a proof of partner ship, so simple it is ^^
 
yes i do, and you do not managing more than 100 users @Marko :), so this topic is not for you, it's for @Foulest , he need to say that he is responsible from what poeple do when they use Control D, if he want to continue to developping something, or send to us alternatively a proof of partner ship, so simple it is ^^
I'm not the developer of the extension, true, but that doesn't mean I don't have a right to point when someone is wrong. And here... in this case... you're wrong, as I proved.

Osprey works locally, there isn't a central server querying ControlD nor any other DNS service. It can have a billion users at the same time, all the requests are done by the users themselves using their own internet connection and IP address. And no, Osprey definitely isn't sending billion requests a second. Heck, no one can write that fast domains into the address bar.
 
I'm not the developer of the extension, true, but that doesn't mean I don't have a right to point when someone is wrong. And here... in this case... you're wrong, as I proved.

Osprey works locally, there isn't a central server querying ControlD nor any other DNS service. It can have a billion users at the same time, all the requests are done by the users themselves using their own internet connection and IP address. And no, Osprey definitely isn't sending billion requests a second. Heck, no one can write that fast domains into the address bar.
what did you proved exactly ? and how do you know that he is working locally, when he say that he have affiliate links with 4 partner ships when he have only 3 real partnership ?
and i doubt he have adguard as a partnership too, even he is right to use there DNS because adguard says nothing about it (in this time)...

but only to contact them,


For the second example, a dns request is not only for a web page, but all the content in a web page too and when this dns request is about a Video request what do you think it make ?

i think that now i just have to whait for his proof, and if you want to continue to use his service , do it, i never say NO to you or any users (when there is only a warning notification).

have a nice day. :cool:
 
what did you proved exactly ?
You said he can't use because it's for personal use only, I asked Barry and he literally replied anyone can use their free DNS service how they want as long as it's not sending overwhelming amount of requests per second from one IP address.
and how do you know that he is working locally, when he say that he have affiliate links with 4 partner ships when he have only 3 real partnership ?
Because:

a) extension is completely open source and you're free to check entire code
b) if there was a central server sending requests users make, IP address of the server would be immediately blocked by the firewall not just od ControlD, but all other services
c) the amount of requests made and traffic would be so huge that @Foulest would need to get a loan just to finance the rented server; and I don't think that's viable when the extension is completely free
when he say that he have affiliate links with 4 partner ships when he have only 3 real partnership ?
You don't know what affiliate means. I use a service which I really like and there is a referral link I will send to my friends so they get discount. Because my friend brought the product, I got a cut of the sale or some other benefit. This is called affiliate program. I do not need a company, server or anything to be part of it. I don't even have to be developer of anything and I can be affiliate.

@Foulest literally linked his affiliate (referral) link on GitHub and that's it.
and i doubt he have adguard as a partnership too, even he is right to use there DNS because adguard says nothing about it (in this time)...

but only to contact them,

AdGuard has many partners and affiliates, and they didn't mentioned any of them on their site. So why would they list Osprey on their website?

Again, he's an affiliate; his referral link to AdGuard product is on his GitHub repository.
For the second example, a dns request is not only for a web page, but all the content in a web page too and when this dns request is about a Video request what do you think it make ?

i think that now i just have to whait for his proof, and if you want to continue to use his service , do it, i never say NO to you or any users (when there is only a warning notification).

have a nice day.
Have you heard for a thing called DNS caching? No? Check it out, it's awesome feature. Also, websites primarily use their own domain to serve content. Once the domain is resolved, all of the files are loaded from it. No new DNS requests are made for same domain with each request. None of the website link to 100 external domains and even if they did, browser resolves one by one domain; certainly not 100 of them in a second.

We know reached the topic of web browsers and how they work. You should also learn this topic as well.

It's past midnight here. I'm going to sleep. Good night! 🙂
 
  • Hundred Points
Reactions: Parkinsond
what did you proved exactly ? and how do you know that he is working locally, when he say that he have affiliate links with 4 partner ships when he have only 3 real partnership ?
and i doubt he have adguard as a partnership too, even he is right to use there DNS because adguard says nothing about it (in this time)...

but only to contact them,


For the second example, a dns request is not only for a web page, but all the content in a web page too and when this dns request is about a Video request what do you think it make ?

i think that now i just have to whait for his proof, and if you want to continue to use his service , do it, i never say NO to you or any users (when there is only a warning notification).

have a nice day. :cool:
Not sure what you're even complaining about these are public apis and public services
All the extension does is forward your request to these DNS servers , apis
It doesn't use any management tools or any paid , non public features
He doesn't owe anything any proof you can see the code of the extension and see that the apis are public
 
Not sure what you're even complaining about these are public apis and public services
All the extension does is forward your request to these DNS servers , apis
It doesn't use any management tools or any paid , non public features
He doesn't owe anything any proof you can see the code of the extension and see that the apis are public
ok @Vitali Ortzi, please have a seen to open source code than (if you are a sec expert programmer), and prove to me his is totaly locally without any external source on his github account from the user side, because yes i am not a web developper, but i am verry intellectual, i don't need any formation to know a course, i just have to navigate on the internet, that sit.
You said he can't use because it's for personal use only, I asked Barry and he literally replied anyone can use their free DNS service how they want as long as it's not sending overwhelming amount of requests per second from one IP address.

Because:

a) extension is completely open source and you're free to check entire code
b) if there was a central server sending requests users make, IP address of the server would be immediately blocked by the firewall not just od ControlD, but all other services
c) the amount of requests made and traffic would be so huge that @Foulest would need to get a loan just to finance the rented server; and I don't think that's viable when the extension is completely free

You don't know what affiliate means. I use a service which I really like and there is a referral link I will send to my friends so they get discount. Because my friend brought the product, I got a cut of the sale or some other benefit. This is called affiliate program. I do not need a company, server or anything to be part of it. I don't even have to be developer of anything and I can be affiliate.

@Foulest literally linked his affiliate (referral) link on GitHub and that's it.

AdGuard has many partners and affiliates, and they didn't mentioned any of them on their site. So why would they list Osprey on their website?

Again, he's an affiliate; his referral link to AdGuard product is on his GitHub repository.

Have you heard for a thing called DNS caching? No? Check it out, it's awesome feature. Also, websites primarily use their own domain to serve content. Once the domain is resolved, all of the files are loaded from it. No new DNS requests are made for same domain with each request. None of the website link to 100 external domains and even if they did, browser resolves one by one domain; certainly not 100 of them in a second.

We know reached the topic of web browsers and how they work. You should also learn this topic as well.

It's past midnight here. I'm going to sleep. Good night! 🙂
for ur info @Marko :) ,

firstly NO a web extension module can not be blocked by a firewall, that is not true, to block the extension module you need to block all the navigator, or configure your json file your self for firefox.By default, MOZILLA do not block Osprey addon and warned you : "This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing."

secondly,
if we are talking the same caching operation : Cache-Control header - HTTP | MDN
I don't accept any caching header on my web browser, just the minimum of memory required for running the Gui navigator.

why ?