11 votes

DNS Privacy

7 comments

  1. [7]
    patience_limited
    Link
    I was deeply disappointed to discover today that OpenDNS is Cisco property - I'm only three years behind on this! Cisco has previously claimed that government agencies exploited their systems...

    I was deeply disappointed to discover today that OpenDNS is Cisco property - I'm only three years behind on this! Cisco has previously claimed that government agencies exploited their systems without their knowledge and there's no collaboration, but I remain unconvinced that it's a good idea to use a "free" DNS service which they control.

    Any commentary, alternative suggestions, tips or other information are welcome, short of the demand that I manage and maintain my own BIND server - I've got too much to do already. And yes, I use a Pihole proxy where I can, but it's not good for everything and doesn't really circumvent the need for clean DNS lookups.

    I do see that there's a DNS-over-HTTPS implementation in the latest Firefox releases, but again, not much help for mobile devices, at least until I can get my hands on Android 9.

    5 votes
    1. [2]
      Comment deleted by author
      Link Parent
      1. patience_limited
        Link Parent
        No, I wasn't, thank you. It's obvious that it's been too long since I last paid serious attention. :-/ Nice that there's an implementation for PiHole.

        No, I wasn't, thank you. It's obvious that it's been too long since I last paid serious attention. :-/

        Nice that there's an implementation for PiHole.

        3 votes
    2. [2]
      Comment deleted by author
      Link Parent
      1. patience_limited
        Link Parent
        Essentially, I set it up and forgot about it. It's been a busy season, and some updates may be this weekend's project.

        Essentially, I set it up and forgot about it. It's been a busy season, and some updates may be this weekend's project.

        2 votes
    3. [4]
      666
      Link Parent
      There are a few other options, AdGuard supports DNSCrypt (see their release notes). You can try Firefox if you only need DoH in your browser, configure it as you'd do in the desktop version, using...

      I do see that there's a DNS-over-HTTPS implementation in the latest Firefox releases, but again, not much help for mobile devices, at least until I can get my hands on Android 9.

      There are a few other options, AdGuard supports DNSCrypt (see their release notes). You can try Firefox if you only need DoH in your browser, configure it as you'd do in the desktop version, using the trr options in about:config. And if you prefer a Chromium based browser, there's Bromite, which also includes adblocking and some anti fingerprinting features; they also offer an alternative system WebView in case your Android version lets you replace it (I think you have to have a rooted device, mine has that option in the developer menu).

      3 votes
      1. [3]
        patience_limited
        Link Parent
        Thank you - the Chrome OS random surfing laptop has AdGuard, so that's another avenue.

        Thank you - the Chrome OS random surfing laptop has AdGuard, so that's another avenue.

        2 votes
        1. [2]
          666
          Link Parent
          Is your Chrome OS AdGuard a browser extension? I don't think that one has DNSCrypt support. The Android app (the one I previously linked) works as a local VPN so it can intercept all DNS queries...

          Is your Chrome OS AdGuard a browser extension? I don't think that one has DNSCrypt support. The Android app (the one I previously linked) works as a local VPN so it can intercept all DNS queries and convert them into DNS-over-HTTPS queries.

          1 vote
          1. patience_limited
            Link Parent
            Yes, it's a browser extension. I'm thinking it's going to be DNSCrypt/Unbound in PiHole for household purposes.

            Yes, it's a browser extension. I'm thinking it's going to be DNSCrypt/Unbound in PiHole for household purposes.

            3 votes