4 ms·

> I really think VPN providers should also provide (open?) DoH resolvers,it helps with their privacy image and a good/fast resolver helps with their performance

> I really think VPN providers should also provide (open?) DoH resolvers,it helps with their privacy image and a good/fast resolver helps with their performance image. And now you're 1 step forward, 2 steps back with the VPN provider having the sum of what was previously divided between your DNS provider and your ISP. Major VPN providers become one-stop-shops for snoopers and I'd bet some of the less scrupulous ones are happy to market your data. There's unfortunately no free lunch but how's this? Run your own recursive resolver offsite (unbound is easy to set up), connect to that over private VPN, use DNSSEC when you can.

keanzu 7y ago
Change "VPN" to "no log VPN" and the problem is solved. Conveniently the most popular VPNs are no log. It isn't a free lunch though, these are paid services.
- Legogris 7y ago
  Hell, even NordVPN is "no log", I wouldn't trust that for a second.
- dagenix 7y ago
  How do you verify that they don't log?
  - keanzu 7y ago
    Subpoenas are the gold standard. There's also audits. https://www.techspot.com/news/82259-keeping-private-5-vpns-have-verified-keep-no.html https://www.techspot.com/news/82259-keeping-private-5-vpns-h...
    - wglb 7y ago
      But this is one of the deals where when you find out, it is too late.
badrabbit 7y ago
They already have regular dns resolvers. This helps in DoH adoption and decentralization.