StrictDNSBot

StrictDNS is a filter for people recovering from porn and gambling addiction. When one of our users visits a site we haven't seen before, StrictDNSBot opens that site's home page to check whether it's safe to open for them.

What it does

• It opens only the home page (/) of a site, and only when a user visits it and no list knows the site yet.
• Each site is checked once. The result is kept, so we don't come back for the same site.
• It doesn't follow links, crawl other pages, run scripts or load images.
• It reads the page title, description and some visible text. Nothing is stored except the title and the verdict.
• It never sends anything about the user who visited the site.

How to recognise it

The user agent contains StrictDNSBot:

Mozilla/5.0 (compatible; StrictDNSBot/1.0; +https://strictdns.com/bot)

Every request is signed with Web Bot Auth (HTTP message signatures). The Signature-Agent header is "https://api.strictdns.com" and our public keys are at api.strictdns.com/.well-known/http-message-signatures-directory. Requests run on Cloudflare Workers, so they don't come from fixed IP addresses.

robots.txt

StrictDNSBot reads robots.txt before opening a page and follows the rules for StrictDNSBot, or for * when there are none for it. To keep it out:

User-agent: StrictDNSBot
Disallow: /

A site StrictDNSBot can't open is checked another way, from what the web says about it. It may then stay blocked for StrictDNS users.

Contact

Questions or problems with StrictDNSBot: write to support@strictdns.com.