4 ms·

"How I re–over-engineered my home network for privacy and security" Proceeds to send all his DNS queries to Cloudflare

• KeepFlying 5y ago
  Still better than sending them to his ISP (or keeping them visible to his ISP no matter the destination). Sure it's not ideal but really very few things are when it comes to home network DNS requests. I'd love suggestions for better solutions though, I'm sure there's something I haven't considered.
  • noncoml 5y ago
    I am a hypocrite as I do the exact same thing, Pi-Hole + Cloudflare. It's just that your title raised my hopes for a better solution. Sorry :)
  • Skunkleton 5y ago
    I intercept port 53 traffic at my router, tunnel it over to my VPS which runs an unbound instance. Overall I think this setup is better because: 1. It denies my ISP the chance to look at my DNS requests. 2. It doesn't involve yet another third party which may or may not try to monetize my dns requests. 3. It mixes my dns related traffic with that of a datacenter, which doesn't provide a compelling source of data for advertisers IMO. DoH throws a wrench in the works. Still considering my options on how I want to address it.