2 ms·

Use 1.1.1.1. Cloudflare have committed to never store identifiable information for more than 24 hours and have committed to independent auditing of their privac

Use 1.1.1.1. Cloudflare have committed to never store identifiable information for more than 24 hours and have committed to independent auditing of their privacy protection. It's three times faster than 8.8.8.8 and it supports DNS over HTTPS. https://1.1.1.1/ https://1.1.1.1/ https://www.dnsperf.com/#!dns-resolvers https://www.dnsperf.com/#!dns-resolvers My Google activity page shows a big fat "No Activity". I have no doubt that they have plenty of my personal data rattling around on various servers, but Google at least pay lip service to offering you control over your data. European data regulators would be extremely displeased if they learned that these controls don't actually do what they purport to do. https://myaccount.google.com/activitycontrols https://myaccount.google.com/activitycontrols

mehrdadn 8y ago
> It's three times faster than 8.8.8.8 You mean 3x faster for you, right? We're talking about a geographically distributed system here... for me it's not too different. Or do you mean their DNS servers are somehow by their nature 3x faster than Google's at responding?
- jdietrich 8y ago
  No, I mean faster across a broad benchmark suite from 227 globally distributed test locations. 1.1.1.1 is faster in every region - in Africa and Oceania, they're faster by over 100ms on average. It's conceivable that some users could get faster resolution from 8.8.8.8, but highly unlikely. https://www.dnsperf.com/#!dns-resolvers https://www.dnsperf.com/#!dns-resolvers Cloudflare are a CDN company. Running a fast geographically distributed system is their core competence.
- deleted 8y ago
  [deleted]
mrmondo 8y ago
Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the servers. Google I have essentially no trust in at all anymore (or maybe ever), Cloudflare I trust to a ‘reasonable’ degree; by that I mean I don’t believe they would (at the and leading up to the time of writing this comment) sell identifiable user data from their 1.1.1.1 DNS service and they have a very high technical skill level when it comes to internet security especially with regards to routing and network metadata. However it’s still not ideal or even slightly close to perfect security and while I’d trust Cloudflare over Google in a heartbeat - like anything that could change and better options that are also easy to use may (will likely) pop up.
- jdietrich 8y ago
  1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being. https://developers.cloudflare.com/1.1.1.1/dns-over-tls/ https://developers.cloudflare.com/1.1.1.1/dns-over-tls/
  - mrmondo 8y ago
    Oh I didn’t know that, thanks for the link!
- JdeBP 8y ago
  If we are talking ideals, then ideally we would be using something a lot better than the DNS protocol, which has been hammered out of shape in order to achieve things pretty hard nowadays, and not DNS-over-something at all.

mehrdadn 8y ago

> It's three times faster than 8.8.8.8 You mean 3x faster for you, right? We're talking about a geographically distributed system here... for me it's not too different. Or do you mean their DNS servers are somehow by their nature 3x faster than Google's at responding?

jdietrich 8y ago
No, I mean faster across a broad benchmark suite from 227 globally distributed test locations. 1.1.1.1 is faster in every region - in Africa and Oceania, they're faster by over 100ms on average. It's conceivable that some users could get faster resolution from 8.8.8.8, but highly unlikely. https://www.dnsperf.com/#!dns-resolvers https://www.dnsperf.com/#!dns-resolvers Cloudflare are a CDN company. Running a fast geographically distributed system is their core competence.
deleted 8y ago
[deleted]

mrmondo 8y ago

Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the servers. Google I have essentially no trust in at all anymore (or maybe ever), Cloudflare I trust to a ‘reasonable’ degree; by that I mean I don’t believe they would (at the and leading up to the time of writing this comment) sell identifiable user data from their 1.1.1.1 DNS service and they have a very high technical skill level when it comes to internet security especially with regards to routing and network metadata. However it’s still not ideal or even slightly close to perfect security and while I’d trust Cloudflare over Google in a heartbeat - like anything that could change and better options that are also easy to use may (will likely) pop up.

jdietrich 8y ago
1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being. https://developers.cloudflare.com/1.1.1.1/dns-over-tls/ https://developers.cloudflare.com/1.1.1.1/dns-over-tls/
- mrmondo 8y ago
  Oh I didn’t know that, thanks for the link!
JdeBP 8y ago
If we are talking ideals, then ideally we would be using something a lot better than the DNS protocol, which has been hammered out of shape in order to achieve things pretty hard nowadays, and not DNS-over-something at all.