- SSL_ERROR_NO_CYPHER_OVERLAP error in Firefox

- ERR_SSL_VERSION_OR_CIPHER_MISMATCH in Chrome/Chromium.

If you try to connect via http:// CloudFlare spits out a DNS resolution error.

If you connect via TOR it works perfectly fine. Tried out several ISPs and their defaulted DNS servers.

edit/update:

It seems to be somewhat DNS blocked, if the response is "1.1.1.4" or "1.1.1.7" for the A record it seems to be the cloudflare's blocked server response. If the IP is "192..." then it's the correct one.

The SSL blocked response of the 1.1.1.7 IP is when the cloudflare proxy responds with an SSL response header that simply offers no ciphers (verify yourself via "openssl s_client archive.today:443")

I could reproduce the behavior with cloudflare's DNS servers and vodafone + Deutsche Telekom + o2/telefonica's DNS servers.

Resolution works fine with Google's DNS servers.

When googling about the issue, I found this old post about it:

https://jarv.is/notes/cloudflare-dns-archive-is-blocked/

It seems as the Cloudflare DNS servers don't send any geolocation info via EDNS and that's why the archive owner decided to respond with bogus responses!? On wikipedia it said the issue was resolved in 2018, but apparently it still isn't? or at least isn't again?