Im looking for a privacy friendly DNS

Comments

• Voroxpete@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

  Mullvad recently announced a free encrypted DNS. It can block ads and malware too.

  mullvad.net/en/…/dns-over-https-and-dns-over-tls

  source

  • seaQueue@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Adguard also offers free public DNS. I’ve used it since discovering that cloudflare blackholes archive.org and all similar sites.

    source

    • redcalcium@lemmy.institute ⁨1⁩ ⁨year⁩ ago

      You’re probably confusing archive.org (The Internet Archive non-profit organization), which works with cloudflare dns, with archive.is (alternate domain for archive.today website snapshot service, commonly used to bypass paywalled articles), which don’t work on cloudflare but it’s due to its owner’s decision, not cloudflare’s fault. The gist is archive.is uses dns-based load balancer, which requires EDNS Client Subnet. But Cloudflare disable EDNS Client Subnet on ther DNS service for privacy reason which seems to piss archive.is owner so much they blocked cloudflare dns.

      source
  • DeathWearsANecktie@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Awesome, I didn’t know about this. I love Mullvad.

    source

    • DarkThoughts@kbin.social ⁨1⁩ ⁨year⁩ ago

      I don't think you need that if you already use their VPN, as that already connects to their DNS servers.

      source
  • kapx132@lemmy.world ⁨1⁩ ⁨year⁩ ago

    im having trouble setting it up

    when i enter the ip into the dns slot in my network settings it does not work Image

    source

    • scytale@lemm.ee ⁨1⁩ ⁨year⁩ ago

      That’s the unencrypted DNS version. The adblocking will work but your queries won’t be encrypted. You’ll either have to configure it on your browser, or configure system-resolved like what is written in the article that was posted.

      source
    • AlexanderKing@lemmy.world ⁨1⁩ ⁨year⁩ ago

      If your distro makes use of systemd, just use resolved: wiki.archlinux.org/title/Systemd-resolved#Manuall…

      source
• satanmat@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Run a Pi-hole with Unbound

  source

  • Shadywack@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Seriously, can vouch for this. Pi-hole is great!

    source
• Teal@lemm.ee ⁨1⁩ ⁨year⁩ ago

  I’ve been using Quad9 and I’m happy with it. Here’s the site if you’re interested in looking into it further.

  Quad9

  source
• YourAvgMortal@lemmy.world ⁨1⁩ ⁨year⁩ ago

  At home you can use (Unbound)[nlnetlabs.nl/projects/unbound/about/]

  source

  • achsonaja@lemmy.world ⁨1⁩ ⁨year⁩ ago

    This coupled with pihole is great! The pihole docs even have setup for unbound and it’s really easy to follow.

    source
• kadu@lemmy.world ⁨1⁩ ⁨year⁩ ago

  NextDNS.

  You can control if you want logs or not, where to store them, for how long, which domains to block, which encryption protocol will be used, and many more features.

  source
• oshitwaddup@lemmy.antemeridiem.xyz ⁨1⁩ ⁨year⁩ ago

  Quad9 or mullvads vpn

  source

  • chemicalwonka@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago

    Mullvad is a better option

    source

    • answer42@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Why?

      source
• Send_me_nude_girls@feddit.de ⁨1⁩ ⁨year⁩ ago

  Honest question, what’s wrong with cloudflare?

  source
• lemmyvore@feddit.nl ⁨1⁩ ⁨year⁩ ago

  Here are two resources for privacy-oriented DNS:

  1. The provider list for the https-dns-proxy module of OpenWRT: github.com/stangri/…/providers
  2. Privacy-oriented European public DNS services: european-alternatives.eu/category/public-dns

  source
• chemicalwonka@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago

  If you have the skill to implement Pi Hole is the best option. If not MullvadDNS is a solid option but if you want a granular control over your DNS queries no doubt NextDNS.

  source
• redcalcium@lemmy.institute ⁨1⁩ ⁨year⁩ ago

  Adguard has a quite comprehensive list of known DNS providers in their documentation. It’s very useful because my ISP transparently redirect all dns queries on port 53, so I’ll have to find DNS providers that listen on alternate ports for my upstream DNS in my Adguard instance.

  source
• RobotToaster@mander.xyz ⁨1⁩ ⁨year⁩ ago

  OpenNIC www.opennic.org

  source
• ranting_sandfish@mander.xyz ⁨1⁩ ⁨year⁩ ago

  In case you are unaware, make sure to override DNS on any web browsers or other programs that might be skipping OS configured DNS servers to use hard-coded DNS over HTTPS servers.

  If you’re running your own DNS resolver you can hint this to some applications in your network via a canary domain

  source
• nix@merv.news ⁨1⁩ ⁨year⁩ ago

  Adguard has an encrypted dns

  source
• climateserver8538@infosec.pub ⁨1⁩ ⁨year⁩ ago

  If you are in Europe, try dns0: www.dns0.eu

  source
• milkjug@lemmy.wildfyre.dev ⁨1⁩ ⁨year⁩ ago

  I’m shilling for controld.com and I will die on this hill.

  source
• Tealk@rollenspiel.forum ⁨1⁩ ⁨year⁩ ago

  Have a look at dnsforge.de

  source