2 ms·
An alternative: I run dnscrypt-proxy locally, encrypting (TLS) all my DNS traffic between me and OpenDNS, also giving me the option for my system resolver to g
by regecks 9y ago
An alternative:
I run dnscrypt-proxy locally, encrypting (TLS) all my DNS traffic between me and OpenDNS, also giving me the option for my system resolver to give NXDOMAIN for any names on a local blacklist.
It was remarkably easy to setup, just install the package.
$ cat /etc/dnscrypt-proxy/blacklist
fbcdn.net
facebook.com
google-analytics.com
www.google-analytics.com
- kqr 9y agoGood suggestion. I sandwhich Dnsmasq between applications and dnscrypt-proxy[1] because the opennic anycast servers were too slow otherwise. [1]: https://two-wrongs.com/secure-dns-on-a-laptop-with-debian.html https://two-wrongs.com/secure-dns-on-a-laptop-with-debian.ht...