41–47 of 47 posts
Earlier quoted context omitted.
When you set up a private VPN to tunnel your traffic through, doesn't your VPN server just become your client? Or am I missing something here?
It does yes. And I think you must be missing something yes.
Addendum: If it's about distrusting your ISP you gotta consider that you're just moving trust to another ISP or service provider (or worst case both, if they're separate entities).
This setup does the opposite of what they're hoping to do, and is the exact reason that Tor implemented "Entry Guards". If there is any pattern in the DNS queries you perform (e.g you visit certain sites regularly), then all of a sudden there are now going to be four additional organisations that know your browsing habbits, on top of your existing one (your ISP). Imagine you go to pornhub.com every day. Your ISP know…
It isn't privacy.
Earlier quoted context omitted.
Why set up a private DNS proxy when you can (arguable more easily) set up a private VPN, which protects all of your traffic instead? A quick "apt install unbound" on the VPN server will give you a private recursive DNS resolver which supports DNSSEC, and you'll be communicating with that over the VPN, so DoH gives you nothing...
> I agree that there is little gain in hiding DNS traffic from your ISP. And like you I'm wondering what the benefit of spreading around one's DNS profile should be. I think it's better to just pick the DNS provider one distrusts the least. This assumes you trust your ISP. I know mine does metadata retention, therefore I do not trust them with my privacy. I also know mine blocks things based on a government "block li…
Yes I meant to say "there is little to gain hiding just DNS traffic from your ISP"
I thought this was someone else providing an anonymized dns proxy at first, but it's just how to set up your own proxy. Not sure this saves anything over just using DoH to one of the listed providers directly (the requests still come from something you own and can technically be traced back to you, albeit with more effort?) edit: I'm wondering what the ideal setup actually is. Would the root servers need to provide D…
In my opinion it would be ideal if all namerservers (including the root servers) would respond to DNS over TLS (DoT?) traffic which seems like it could be easily adopted but would probably increase the load considerably in some cases (i guess root servers see some massive amount of traffic)... i dont think this will happen anytime soon with DoH or DNS over TLS
Round robin providers is really bad idea. Its like leaving your foot print in literally all places.
Best is to use Tor Browser if you really need privacy.
Earlier quoted context omitted.
I'd be ok with that. The problem would be the emergence of unscrupulous DoH providers. Presumably the fear is that having DoH built into the browser lowers the bar to entry for people who want to use it as part of engaging in criminality.
DoH compared to plain old DNS is about as much as a crime-enabler as HTTPS compared to HTTP (probably even less)
Earlier quoted context omitted.
It does yes. And I think you must be missing something yes.
So, what is the benefit of a private tunnel that maps uniquely to you? Addendum: If it's about distrusting your ISP you gotta consider that you're just moving trust to another ISP or service provider (or worst case both, if they're separate entities).
When somebody says that using a VPN would be better. You need to consider what they are saying it is better than.