undefined | Better HN

0 pointschupasaurus6y ago0 comments

Currently, the only way to configure DoH for everything is one-time setting local dnscrypt-proxy as the only resolver. Easy on Android 9+ and Linux with systemd, on Windows you have to override DNS settings for all NICs because it has a weird process of resolving. Don't know about macOS, iOS is definitely out.

edit P.S: I'd never trust ISP's DNS servers, because it's the easiest way to track what customers does.

0 comments

alibert6y ago

For iOS, you can check out DNSCloak, Adguard, NextDNS, Cloudflare 1.1.1.1, etc. which are all system wide resolver.

fragmede6y ago

I may trust Comcast as far as I can throw them. I still prefer that they get my data, rather than even more of my browsing data go straight to Google.

tptacek6y ago

The point of DoH is that you don't have to send your DNS queries to either of those entities.

j / k navigate · click thread line to collapse