3 ms·

I never liked the idea of using DNS services for filtering web content. For one, it seems like the wrong tool for the job. Filtered content can simply switch

I never liked the idea of using DNS services for filtering web content. For one, it seems like the wrong tool for the job. Filtered content can simply switch to identifying content by IP address instead of DNS, correct? Or change DNS constantly. And for two, of course there are concerns with handing someone your DNS queries in return for filtering...

ignoramous 8y ago
Privacy is one major reason you might want to switch to a dns provider you trust. Not to mention security as well as it isn't uncommon for ISPs or rouge actors to 'take over' domains solely using attacks via DNS. If you're not using DNS over TLS or HTTPS, I suggest you start right now. If you're undecided abt DNS based adblock, consider reading this blog post: https://www.troyhunt.com/mmm-pi-hole/ https://www.troyhunt.com/mmm-pi-hole/
greglindahl 8y ago
In practice, I’ve never seen filtered content change to ip addresses or rotating dns names. Do you know of an example?
- woolvalley 8y ago
  A lot of adblock can be circumvented if the ads were served from first party servers and didn't use obvious keywords or advertising sizes. The NYT could serve their ads from NYT servers instead of nagging you to turn off adblock and continue with their 3rd party ad providers. So they are not doing that, so I doubt cirumventing DNS adblock will be something that they will care much about either.
- JdeBP 8y ago
  This particular arms race happened in the world of WWW pornography back in the 1990s. I'll leave finding examples to you. People have been blocking stuff for decades now, and we know what the responses to some of the initial moves will be, because the world has already gone through the dance.
ohyeshedid 8y ago
There are certainly ways to bypass dns filtering, but as far as I know it's the most performant, and effective, way to do it. I wouldn't use a third party service for that, preferring instead to use pihole.
kerng 8y ago
>>And for two, of course there are concerns with handing someone your DNS queries in return for filtering... Correct, but probabaly better then to give it to Google or your ISP for free!
lunchables 8y ago
Depends on what your goal is. If you have children and you want to avoid accidentally seeing porn or being delivered a malicious ad, DNS based blocking can be a great tool. Also if you just want to improve the general security and performance of your home network.

ignoramous 8y ago

Privacy is one major reason you might want to switch to a dns provider you trust. Not to mention security as well as it isn't uncommon for ISPs or rouge actors to 'take over' domains solely using attacks via DNS. If you're not using DNS over TLS or HTTPS, I suggest you start right now. If you're undecided abt DNS based adblock, consider reading this blog post: https://www.troyhunt.com/mmm-pi-hole/ https://www.troyhunt.com/mmm-pi-hole/

greglindahl 8y ago

In practice, I’ve never seen filtered content change to ip addresses or rotating dns names. Do you know of an example?

woolvalley 8y ago
A lot of adblock can be circumvented if the ads were served from first party servers and didn't use obvious keywords or advertising sizes. The NYT could serve their ads from NYT servers instead of nagging you to turn off adblock and continue with their 3rd party ad providers. So they are not doing that, so I doubt cirumventing DNS adblock will be something that they will care much about either.
JdeBP 8y ago
This particular arms race happened in the world of WWW pornography back in the 1990s. I'll leave finding examples to you. People have been blocking stuff for decades now, and we know what the responses to some of the initial moves will be, because the world has already gone through the dance.

ohyeshedid 8y ago

There are certainly ways to bypass dns filtering, but as far as I know it's the most performant, and effective, way to do it. I wouldn't use a third party service for that, preferring instead to use pihole.

kerng 8y ago

>>And for two, of course there are concerns with handing someone your DNS queries in return for filtering... Correct, but probabaly better then to give it to Google or your ISP for free!

lunchables 8y ago

Depends on what your goal is. If you have children and you want to avoid accidentally seeing porn or being delivered a malicious ad, DNS based blocking can be a great tool. Also if you just want to improve the general security and performance of your home network.