7 ms·
My Pi-hole is set up to do encrypted DNS. Advantage: every device on my home network automatically benefits from this.
by plg 7y ago
My Pi-hole is set up to do encrypted DNS. Advantage: every device on my home network automatically benefits from this.
- kodachi 7y agoI was thinking for a while to do more networking security at home, from basic stuff like a guest's wifi, to white-listing content and ports. How much time did it take you to set up Pi-hole to your liking?
- ahipple 7y agoI set it up a couple of months ago as well and as I recall I went from zero to "up and running" in an hour or two — I usually wake up a little earlier than my wife and I'd finished setting it up by the time we were ready to make breakfast. The ArchWiki page (https://wiki.archlinux.org/index.php/Pi-hole https://wiki.archlinux.org/index.php/Pi-hole) was a useful reference for the few snags I encountered.
- theWheez 7y agoI’ll second this. Pi-Hole was very easy to set up and gives me some good peace of mind. Love seeing query trends too.
- plg 7y agoNot long at all for the basic setup. For encrypted DNS setup I used this guide which worked: https://scotthelme.co.uk/securing-dns-across-all-of-my-devices-with-pihole-dns-over-https-1-1-1-1/ https://scotthelme.co.uk/securing-dns-across-all-of-my-devic...
- kodachi 7y agoThanks all. Of course the arch wiki is a good place to go. I will definitely give it a try.
- StreamBright 7y agoIt is pretty simple to set up. You can do it in 1 hour.
- noncoml 7y agoSo instead of getting spied, blocked, tampered, etc. by your ISP you are getting spied by Cloudflare? We didn’t solve the problem, just shifted it..
- satokema 7y agoWhat DNS provider is actually trustworthy and how can you prove it?
- greenyoda 7y agoMy ISP knows my real-world identity: name, address, phone number and credit card information. Cloudflare knows none of these things about me, so there's much less they can do with my browsing information.
- tinus_hn 7y agoCloudflare has access to many of the sites you browse. They have the SSL keys, they host the services. They (potentially) know a lot more about you than your ISP. If you ever bought something from a web shop hosted on Cloudflare they have access to your billing address, credit card info and what you are buying. They may not collect it but they do have access.
- celsoazevedo 7y agoSet up your own server then?
- BlackRing 7y agoWho said he was using cloudflare as his upstream DNS? There are far more choices than cloudflare, google, or your ISP.
- snek 7y agoCloudflare has a list of all data they collect from firefox DoH here: https://developers.cloudflare.com/1.1.1.1/commitment-to-privacy/privacy-policy/firefox/ https://developers.cloudflare.com/1.1.1.1/commitment-to-priv...
- xjay 7y agoThat is, until software on any of these devices start running their DNS queries through DoH directly, circumventing any DNS filtering at the perimeter. This is what browsers, like Firefox, are likely to do as it stands today.
- StreamBright 7y agoThen there can be a browser that does not do that and this is what I will use.
- andrerm 7y agoUntil you're minority, the browser don't receives funds enough and dies
- tinus_hn 7y agoAnd then you change the setting from the default to make it do what you want. The sky is not falling.
- TeMPOraL 7y agoUntil they take that setting away from you, "because security". Not to mention that where DNS was centrally managed before, now you have to change settings in each and every application that uses DoH to resolve names on the Internet. (And then Google decides to do cert pinning on DoH, and suddenly you can only ever use 8.8.8.8 and 1.1.1.1, and if you want to change it, you need to buy Enterprise version of Chrome.)
- andrerm 7y agoI do think you're right. And I also think that DoH will legitimate MITM because if application developers can break an long standing contract like DNS on OS well... "why can't we"
- andrerm 7y agoUntil you can't any more
- plg 7y agotried this (installing unbound) — seems to work well, easy install https://docs.pi-hole.net/guides/unbound/#setting-up-pi-hole-as-a-recursive-dns-server-solution https://docs.pi-hole.net/guides/unbound/#setting-up-pi-hole-...