Update Safe Surfer servers

[kirwan-safesurfer]

General update, including DoH primary and secondary IPv4 + IPv6.

[jedisct1]

Are the name changes necessary? This is fine, but it is going to break for people having the current names configured.

[kirwan-safesurfer]

Thanks, that makes sense. I've tweaked the naming scheme to preserve the current names.

[jedisct1]

218:Reject connection

[kirwan-safesurfer]

I've just performed on my Windows workstation a manual test of that stamp (sdns://AgAAAAAAAAAADjM1LjIyNy4yMjYuMTQyIFZLkFKn851XolB8scViZfXvz5MhxPQDR-LvcTsWagolEWRvaC5zYWZlc3VyZmVyLmlvCi9kbnMtcXVlcnk) and it passes successfully:

[2026-02-20 13:23:23] [NOTICE] dnscrypt-proxy 2.1.15
[2026-02-20 13:23:23] [NOTICE] Using default Weighted Power of Two (WP2) load balancing strategy
[2026-02-20 13:23:23] [NOTICE] Network connectivity detected
[2026-02-20 13:23:23] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
[2026-02-20 13:23:23] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
[2026-02-20 13:23:23] [NOTICE] Firefox workaround initialized
[2026-02-20 13:23:23] [NOTICE] Hot reload is disabled
[2026-02-20 13:23:24] [NOTICE] [safesurfer] OK (DoH) - rtt: 455ms
[2026-02-20 13:23:24] [NOTICE] Server with the lowest initial latency: safesurfer (rtt: 455ms), live servers: 1

Is there something else we need to check?

[jedisct1]

--- resolve output ---
Resolving [example.com] using 127.0.0.1 port 5300

Unable to resolve: [Timeout]
--- proxy log ---
[2026-03-29 12:22:15] [CRITICAL] [test-server] Certificate hash [564b9052a7f39d57a2507cb1c56265f5efcf9321c4f40347e2ef713b166a0a25] not found
[2026-03-29 12:22:15] [ERROR] Certificate hash not found
[2026-03-29 12:22:25] [CRITICAL] [test-server] Certificate hash [564b9052a7f39d57a2507cb1c56265f5efcf9321c4f40347e2ef713b166a0a25] not found
[2026-03-29 12:22:35] [CRITICAL] [test-server] Certificate hash [564b9052a7f39d57a2507cb1c56265f5efcf9321c4f40347e2ef713b166a0a25] not found

[kirwan-safesurfer]

Thanks, try it now. I was able to produce the corrected result alongside matching the passing secondary hash.