3 ms·
Doesn't this just result in more organizations having your data? Presumably most DNS entries have some finite TTL, such as a few minutes / hours / days. Let's s
by Thiez 5y ago
Doesn't this just result in more organizations having your data? Presumably most DNS entries have some finite TTL, such as a few minutes / hours / days. Let's say one of your favorite websites has a TTL of 10 hours, and you visit this website once per day. Then eventually (soon!) you will have asked most or all of your servers for that domain, so now they all have your data. Or do you have your PiHole configured that it always asks the same server for the same domain?
- 3np 5y agoYou could share the namespaces using some consistent hashing so any given domain would hit the same server. Maybe something exists for that already?
- jeroenhd 5y agoYou're right that this is the case. I set it up so that I can use the double encryption system with a DoH proxy when I eventually resolve this issue. In practice, 60% is my traffic ends up at cloudflare already, so I might as well use their DNS until then. It's also an availability thing. There's that one archive website on a vendetta against cloudflare for not forwarding enough data in DNS requests (eDNS or something?) that I can access by using alternative servers as well. In the rare case of a cloudflare outage, this also ensures uptime. DNS cannot be made fully anonymous, though that double encrypted DoH thing seems promising. Picking a few trusted providers isn't a problem for me personally.