Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shutting down our public encrypted DNS

mullvad.net

Post reply on HN
Print view View original

21–30 of 213 posts

Re: Shutting down our public encrypted DNS

#21

Post by ajjahs »

mentalgear wrote: post #18

I'm always wondering whether those centralized privacy services are not the easiest first target for three-letter-agencies to infiltrate to gain access to the most relevant users to track - and what currently would prevent them from doing so if they haven't already ? Maybe, as with the case of many TOR nodes , they might be running them.

> and what currently would prevent them from doing so if they haven't already

they arent gods. some people actually have moral standards and dont just do whatever a foreign agency wants them to do

Re: Shutting down our public encrypted DNS

#22

Post by koeliga »

brettdav wrote: post #19
ianmurrays wrote: post #10

Does anyone know of good alternatives that also block ads? Seems Quad9 doesn't.

What about Cloudflare’s public DNS? https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-fa... 1.1.1.2 1.0.0.2 2606:4700:4700::1112 2606:4700:4700::1002

Cloudflare DNS does not block ads, it only blocks malware

Re: Shutting down our public encrypted DNS

#23

Post by iamnothere »

Quad9 is a reasonable choice given the stance on privacy and the similar jurisdiction (Mullvad would probably face the same takedown orders as Quad9), but really anyone who cares about bypassing national blocking orders should run a local caching recursive resolver. Unbound is a great choice.

Unbound can also be used to block malware and advertising domains using shared public lists, or you can build your own list. Your resolver’s DNS queries could be piped through Mullvad or Tor if you want additional privacy.

Re: Shutting down our public encrypted DNS

#24

Post by kennethrc »

1vuio0pswjnm7 wrote: post #11

These was one of the fastest DoH services for pipelined queries over single TCP connection IME, it was much faster than Quad9 for this purpose First Mullvad shuts down its Google search proxy Now its DoH service What's next

They lost me as a customer when they got rid of port forwarding, which is nice to have on the high seas

Re: Shutting down our public encrypted DNS

#25

Post by autoexec »

mentalgear wrote: post #18

I'm always wondering whether those centralized privacy services are not the easiest first target for three-letter-agencies to infiltrate to gain access to the most relevant users to track - and what currently would prevent them from doing so if they haven't already ? Maybe, as with the case of many TOR nodes , they might be running them.

I don't think there's any company with useful information on the American public that isn't being forced to regularly hand over that data. That's probably been true to some extent for a long time (see Room 641A) but it's certainly gotten worse. At this point you can't check out a book from the library without the feds demanding that your librarian turn over a list of everything you've ever read, or rent a hotel room for a night without the hotel being forced to provide your information to the government.

Use an online service that's new enough and small enough and it might not be compromised, but the moment it gets popular men with guns and national security letters with gag orders will show up to install hardware on their prem, take over entire offices, or just demand reports.

VPNs and secure DNS services aren't there to keep your data from the NSA, ICE, or even the police. They are useful for keeping your ISP from selling your browsing history to anyone willing to pay them (https://www.mitnicksecurity.com/in-the-news/republicans-just...). It'll help keep a little of what you do online away from data brokers, keep your ISP from sending you DMCA notices, and not much else.

Re: Shutting down our public encrypted DNS

#26

Post by assumed_throwaw »

pbhjpbhj wrote: post #2

>We want a public service to be available. Going forward, we will support Quad9 instead of running it ourselves. Running a privacy-focused public DNS service is a highly specialized undertaking, and the Quad9 Foundation is the undisputed leader in the field. Rather than duplicating their efforts to achieve only part of what they do, we're putting those resources toward financially supporting Quad9 instead. Brilliant.

Unfortunately, Quad9 is censoring some domains in Europe (notably in France and Italy) following injunctions issued by rights holders [1]. That was not the case with Mullvad's DNS.

[1] https://quad9.net/news/blog/italian-blocking-demands-followi...

Re: Shutting down our public encrypted DNS

#29

Post by cortesoft »

1970-01-01 wrote: post #20
oofdere wrote: post #9

Earlier quoted context omitted.

Quad9 doesn't have an adblocking DNS service though, so it's not really a replacement.

This is a very important detail. Adblock in 2026 is necessary and DNS will transparently do a lot of that work for you. It isn't just about lightning fast lookups and five-nines uptime anymore.

For blocking, I would much rather run my own service.

Re: Shutting down our public encrypted DNS

#30

Post by ornornor »

oofdere wrote: post #9
pbhjpbhj wrote: post #2

>We want a public service to be available. Going forward, we will support Quad9 instead of running it ourselves. Running a privacy-focused public DNS service is a highly specialized undertaking, and the Quad9 Foundation is the undisputed leader in the field. Rather than duplicating their efforts to achieve only part of what they do, we're putting those resources toward financially supporting Quad9 instead. Brilliant.

Quad9 doesn't have an adblocking DNS service though, so it's not really a replacement.

Mullvad had adblocking, malware blocking. And they didn’t block websites from governments blacklists in France and Italy. None of these features are available on Quad9.

Maybe it’s time to try nym.com?

Post reply on HN