31–40 of 364 posts
Ignore the "incorrect" and "hijacked" warnings, I think the program has hardcoded, outdated IP ranges for popular services which causes those.
I presume that Google uses this as part of it's surveillance operation.
Earlier quoted context omitted.
Quad9 is supported/funded by City Of London Police, the same police that cooperates with ad companies to track people online. https://www.theguardian.com/media-network/media-network-blog... Keep away from this.
Interesting question: would I rather protect my elderly Mum from known malicious domains potentially trying to scam/phish, or from potential tracking and ad targeting? (Actually, it's not really a difficult choice at all, is it?)
9.9.9.9 does not seem to be geographically-aware. Here are the resolutions for the same domain name (CNAME referring to the hopefully closest edge server), from France. % dig [domain] @8.8.8.8 +short [id].kxcdn.com. p-frpa00.kxcdn.com. # France % dig [domain] @9.9.9.9 +short [id].kxcdn.com. s-us-ca00.kvcdn.com. # America p-ussj00.kxcdn.com. % dig [domain] @1.1.1.1 +short [id].kxcdn.com. p-frpa00.kxcdn.com. # France %…
9.9.9.9 does not seem to be geographically-aware. Here are the resolutions for the same domain name (CNAME referring to the hopefully closest edge server), from France. % dig [domain] @8.8.8.8 +short [id].kxcdn.com. p-frpa00.kxcdn.com. # France % dig [domain] @9.9.9.9 +short [id].kxcdn.com. s-us-ca00.kvcdn.com. # America p-ussj00.kxcdn.com. % dig [domain] @1.1.1.1 +short [id].kxcdn.com. p-frpa00.kxcdn.com. # France %…
I wasn't aware of Quad9, it seems like a pretty great option for those that are easy targets of scams/phishing.
Just run your own DNS resolver if you value your privacy. With prefetching and caching there will be little difference in performance.
But your DNS will have to query other DNS providers so if you’re the only one using it, it won’t be private.
And use long TTL time with large cache size.
Other than some small edge cases, this is pretty much the most secure and fastest DNS performance you will have, in most instances getting about 1 or I have been using unbound for at least 4 years. Simple and fast.
Besides response time, the next level of comparison is how well geo-DNS-based services (global load balancing, etc.) support these resolvers. AFAIK 8.8.8.8 gives decent results in most places, though I've seen suboptimal US-centric results from Quad9 in Asia. Support for RFC 7871 (Client Subnet in DNS Queries) comes into play here too.
But just found out today that, from Sydney, OpenDNS and Cloudflare are kicking Google's ass for speed. 8.8.8.8 is on par with my ISP-default DNS.
Or you can even use a CLI https://perfops.net/cli to run custom tests from any location
