3 ms·
Thing is, with DNS, the ISP can just intercept your DNS requests anyway. Turn on DoH imo
by aaomidi 3y ago
Thing is, with DNS, the ISP can just intercept your DNS requests anyway. Turn on DoH imo
- duped 3y agoIf you really care, run your own DNS locally. Not all devices/applications support DoH.
- Dylan16807 3y agoRunning your own doesn't prevent interception for most domains.
- aaomidi 3y agoFor any domains really. Your best bet is something like Dnscrypt or DoH that exposes a resolver locally on your full network.
- lxgr 3y agoYou can run a DoH-to-regular-DNS bridging resolver locally. My router supports that out of the box, but unfortunately it's somewhat unreliable compared to regular UDP resolution and I had to turn it back off.
- duped 3y agoIt more or less does if your local DNS is just presenting DoH as normal DNS to every device on your LAN, since most devices let you configure DNS per network (even smart TVs, which is nice) but may not have any option for DoH. But at some point you have to trust someone.
- Dylan16807 3y ago> It more or less does if your local DNS is just presenting DoH as normal DNS to every device on your LAN That's more of a proxy than running my own. > But at some point you have to trust someone. If I do my own recursive queries from multiple networks, I don't really have to trust anyone. (I mean, that's still trusting authoritative servers, but arguably they're correct by definition.) Though I could also ask multiple diverse DoH servers to get a similar effect.
- deleted 3y ago[deleted]
- ranger_danger 3y agousing DoH or DoT just shifts who you have to trust, from your ISP to another company, quite possibly one with a greater interest in selling your data or being mass-surveilled.
- nathanaldensr 3y agoTo use DNS whatsoever you have to at least trust the DNS host, though. There is no such thing as perfect trust on the internet.