5 ms·
That sounds good in principle, but is there a more private configuration that doesnt send DNS resolutions to cloudfare, google et al. ie. avoid BigTech trackin
by whitehexagon 1y ago
That sounds good in principle, but is there a more private configuration that doesnt send DNS resolutions to cloudfare, google et al. ie. avoid BigTech tracking, and not wanting DOH.
dnsmasq with a list of smaller trusted DNS providers sounds perfect, as long as it is not considered bad etiquette to spam multiple DNS providers for every resolution?
But where to find a trusted list of privacy focused DNS resolvers. The couple I tried from random internet advice seemed unstable.
- agolliver 1y agoThere are no good private DNS configurations, but if you don't trust the big caching recursive resolvers then I'd consider just running your own at home. Unbound is easy to set up and you'll probably never notice a speed difference.
- hdgvhicv 1y agoI trust my isp far more than I trust cloudflare and google
- bagels 1y agoWhy? Some were injecting ads, blocking services, degrading video and other wrongdoings.
- sanxiyn 1y agoMaybe their ISPs don't do that. There are many ISPs on the Earth.
- hdgvhicv 1y agoMine doesn’t do that, mine is very transparent about what they do, what they will support, what laws they have to follow, what guidelines they can ignore, what logging they do, and if I have issues I jump on IRC and talk to them. If I have issues with cloudflare what do I do?
- sophacles 1y agoYou can just run unbound or similar and do your own recursive resolving.
- Tmpod 1y agoQuad9 and NextDNS are usually thrown around.
- Yeri 1y agohttps://www.dns0.eu/ https://www.dns0.eu/ is an option
- mcpherrinm 1y agoI've reviewed the privacy policy and performance of various DoH servers, and determined in my opinion that Cloudflare and Google both provide privacy-respecting policies. I believe that they follow their published policies and have reasonable security teams. They're also both popular services, which mitigates many of the other types of DNS tracking possible. https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/ https://developers.cloudflare.com/1.1.1.1/privacy/public-dns...
- bsilvereagle 1y agoI haven’t had any problems with OpenNIC: https://opennic.org/ https://opennic.org/ > OpenNIC (also referred to as the OpenNIC Project) is a user owned and controlled top-level Network Information Center offering a non-national alternative to traditional Top-Level Domain (TLD) registries; such as ICANN.
- hamandcheese 1y agoNextDNS. Generous free tier, very affordable paid tier. Happy customer for several years and I've never noticed an outage.
- Melatonic 1y agoThis
- malnourish 1y agoLikewise; they make it easy to use across my devices, each with bespoke configuration.
- paradao 1y agoUsing DNSCrypt with anonymized DNS could be an option: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-DNS https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-D...
- localtoast 1y agodnsforge.de comes to mind.