3 ms·

Many of us that use local DNS (pi-hole and similar technology), this is not an option. On the other hand, I feel more secure with my local ISP than with mega ad

Many of us that use local DNS (pi-hole and similar technology), this is not an option. On the other hand, I feel more secure with my local ISP than with mega ad-corporation like Google. I think that DNS over HTTPS is loved by the ad-community. No local DNS that can disturb or block user generated data. Don’t get fooled people. #DeleteGoogle

ac29 8y ago
There's no reason you can't use DNS over HTTPS and pi-hole, just use dnscrypt-proxy, and point your pi-hole at that: https://github.com/jedisct1/dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy
- XparentX 8y ago
  Thanks for tip! Will look into it.
krylon 8y ago
As I just learned a few minutes ago, you can run your own DNS over HTTPS server. Then you do not need to trust either Google or your ISP.
- mike-cardwell 8y ago
  Just another thing that you need to remember to configure on each of the applications that don't use the system resolver, on each of your systems. I guess for me that equates to Firefox on 3 systems. Although I have three separate Firefox profiles, so I guess that's 9 times it needs configuring. And at some point 3 copies of Chrome, and another 3 Chromiums I guess. And then whatever other apps decide they want their own custom name resolution. That's assuming I'm actively notified that they have been changed to work that way, and assuming I remember to do it after each install. Because by the sound of it, without remembering to configure my systems, I'm going to end up in a situation where I'm now shipping off a list of all the websites I visit to some American corp for safe keeping, by default. Along with everyone else in the World. I can't even sit here in the UK, visiting a UK website, without asking an American corp for the IP. At least today, I'm asking my ISP for the IP. A company based in my legal jurisdiction, with whom I have a business relationship. [edit] I forgot Firefox on my phone too. Thankfully I don't have a tablet.

ac29 8y ago

There's no reason you can't use DNS over HTTPS and pi-hole, just use dnscrypt-proxy, and point your pi-hole at that: https://github.com/jedisct1/dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy

XparentX 8y ago
Thanks for tip! Will look into it.

krylon 8y ago

As I just learned a few minutes ago, you can run your own DNS over HTTPS server. Then you do not need to trust either Google or your ISP.

mike-cardwell 8y ago
Just another thing that you need to remember to configure on each of the applications that don't use the system resolver, on each of your systems. I guess for me that equates to Firefox on 3 systems. Although I have three separate Firefox profiles, so I guess that's 9 times it needs configuring. And at some point 3 copies of Chrome, and another 3 Chromiums I guess. And then whatever other apps decide they want their own custom name resolution. That's assuming I'm actively notified that they have been changed to work that way, and assuming I remember to do it after each install. Because by the sound of it, without remembering to configure my systems, I'm going to end up in a situation where I'm now shipping off a list of all the websites I visit to some American corp for safe keeping, by default. Along with everyone else in the World. I can't even sit here in the UK, visiting a UK website, without asking an American corp for the IP. At least today, I'm asking my ISP for the IP. A company based in my legal jurisdiction, with whom I have a business relationship. [edit] I forgot Firefox on my phone too. Thankfully I don't have a tablet.