Comment on Cloudflare is bad. Youre right.

• KingThrillgore@lemmy.ml ⁨6⁩ ⁨days⁩ ago

  I already use pihole, but with cloudflared as the upstream. What benefits does unbound offer besides improved security?

  source

  • MigratingtoLemmy@lemmy.world ⁨6⁩ ⁨days⁩ ago

    It’s actually better privacy since it talks directly to the root servers instead of cloudflare knowing all of your DNS traffic. Quad9 is a good alternative with better data policies

    source

    • IHawkMike@lemmy.world ⁨6⁩ ⁨days⁩ ago

      So now your ISP sees all of your queries instead of CF. (Assuming the cloudflared option is using DoH)

      I’ll trust Cloudflare over Comcast/AT&T/etc. any day of the week.

      source

      • MigratingtoLemmy@lemmy.world ⁨3⁩ ⁨days⁩ ago

        You might want to study more about SNI. Your ISP knows anyway

        source

        • -> View More Comments
      • maxwellfire@lemmy.world ⁨5⁩ ⁨days⁩ ago

        Your ISP knows where you’re going anyway. They don’t need DNS for that. They see all the traffic.

        source
      • girsaysdoom@sh.itjust.works ⁨5⁩ ⁨days⁩ ago

        It looks like Quad9 supports DoH: quad9

        source
      • MigratingtoLemmy@lemmy.world ⁨6⁩ ⁨days⁩ ago

        You can run a VPN and tunnel your outbound DNS queries over that. Heck, you could tunnel your DNS queries over TOR

        source
• Andromxda@lemmy.dbzer0.com ⁨6⁩ ⁨days⁩ ago

  If you use 9.9.9.9, you should try Mullvad DNS (with adblocking) or AdGuard Public DNS

  source

  • Manalith@midwest.social ⁨6⁩ ⁨days⁩ ago

    Since we’re all throwing out DNS options, I’ll toss in NextDNS

    source