What's your favorite encrypted DNS server? (Please only reply with servers that you personally use.)
Conversation
Notices
-
Embed this notice
Thomas 🔭✨ (thomasfuchs@hachyderm.io)'s status on Saturday, 24-Feb-2024 01:51:19 JST Thomas 🔭✨
-
Embed this notice
Thomas 🔭✨ (thomasfuchs@hachyderm.io)'s status on Saturday, 24-Feb-2024 02:00:08 JST Thomas 🔭✨
@cadusilva that exposes you to tracking via the root servers (should they choose to track)
-
Embed this notice
Cadu Silva :v_blue: (cadusilva@bolha.one)'s status on Saturday, 24-Feb-2024 02:00:11 JST Cadu Silva :v_blue:
@thomasfuchs self-hosted AdGuard Home in the frontend + Unbound in the backend. No third-parties, right to the root DNS servers.
-
Embed this notice
Thomas 🔭✨ (thomasfuchs@hachyderm.io)'s status on Saturday, 24-Feb-2024 02:03:35 JST Thomas 🔭✨
@cadusilva I think the best answer is probably rolling distribution of lookups over a variety over services that at least claim to be private without logging
-
Embed this notice
Cadu Silva :v_blue: (cadusilva@bolha.one)'s status on Saturday, 24-Feb-2024 02:03:36 JST Cadu Silva :v_blue:
@thomasfuchs yeah, but what's the alternative? Forward to Google? Cloudflare? IBM (Quad9)? The tracking that way is more certain :ms_hand_over_mouth:
-
Embed this notice
Steven (sbank@hachyderm.io)'s status on Saturday, 24-Feb-2024 03:04:48 JST Steven
@thomasfuchs I use AdGuard’s.
-
Embed this notice
Steven (sbank@hachyderm.io)'s status on Saturday, 24-Feb-2024 03:09:52 JST Steven
@thomasfuchs @cadusilva also I learned that my ISP (Verizon Fios) will intercept those root server lookups. Use something like dnsleaktest to verify that you are indeed going to a root server.
-
Embed this notice
Thomas 🔭✨ (thomasfuchs@hachyderm.io)'s status on Saturday, 24-Feb-2024 03:15:42 JST Thomas 🔭✨
@sbank @cadusilva yeah, one of the many reasons with DoH is a good idea
-
Embed this notice