3 ms·
So what will be « safer » ? Using a pi-hole or equivalent, or using this ? IIRC all DoH requests are sent to Cloudflare. Is there a way to host your own DNS s
by JeanMarcS 7y ago
So what will be « safer » ?
Using a pi-hole or equivalent, or using this ?
IIRC all DoH requests are sent to Cloudflare. Is there a way to host your own DNS server and use it with DoH instead ?
- milofeynman 7y agoThey are not mutually exclusive. Pi-hole supports dns-over-https. My concern with this technology is my port 53 masquerade rule on my router will no longer grab all dns requests when this becomes common practice. I imagine there will be a solution but I'm not sure what it is.
- mtsr 7y agoI don't really see a solution without installing root CA's to MitM HTTPS traffic. I too would be interested in solutions for this.
- pletnes 7y agoAFAIK a pi-hole can use dns-over-https if configured correctly so there’s no either/or.
- jlgaddis 7y agoYeah, you can re-configure Pi-Hole to use DoH (with your preferred servers). unbound can be configured to use DoH as well.
- mtsr 7y agoFor forwarding yes, but not for recursive resolution.
- mike-cardwell 7y agoFor unbound, I just dropped this in my /etc/unbound/unbound.conf.d/02-block-doh.conf local-zone: "use-application-dns.net" static
- mtsr 7y agoExactly what I did.
- iforgotpassword 7y agoFor now I'm blocking traffic to Google's and cloudflare's DNS and plan on also following the advice about that special domain from https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https https://support.mozilla.org/en-US/kb/configuring-networks-di... that someone posted here.