4 ms·

Obviously another solution on linux is to install a local recursive DNS resolver and be done with it... I'm quite happy with knot-resolver (kresd).

• beermonster 5y ago
  This only works if your ISP is using/abusing/hijacking DNS to censor your connections. If they're doing that you'd be better off using D-o-T or D-o-H, to protect your DNS from interference.
  • lapinot 5y ago
    ISP rarely do anything else than DNS censoring (censoring by ip blackholing is for really grave stuff). Also i don't understand why you'd be "better off" using encrypted connection to a 3rd party DNS which can still lie to you. Just run a local resolver, it's so lightweight there's no real reason not to. (and honestly, the hypothetical delay isn't noticeable)
    • kortilla 5y ago
      A 3rd party is better because it can be hosted in some other country not subject to local fascism du jour you have to deal with from your ISP.
    • NilsIRL 5y ago
      Sorry, am I missing something because I'm pretty sure the whole point of the article is that ISPs do block more than just DNS
      • lapinot 5y ago
        Is it? I didn't understand that. It's just a random tutorial on using a proxy for a specific domain.