Hello!
My knowledge about DNS resolvers is somewhat limited. So, in an effort to expand my knowledge and find a DNS resolver that works for me, I’ve come for help here.
Here is a list of terminology that I either know too little about, don’t know anything about, or want to make sure my understanding is correct about:
Cleartext (What does this mean in the context of protocols? Is it inherently bad?)
DoH (I somewhat understand this, but is it less secure than DoT?)
DoH/3 (How is this different from DoH?)
DoT (Is this more private than DoH?)
DoQ (I don’t know enough about this, how does it compare to DoH and DoT?)
DNSCrypt (I’m not sure what this is.)
Do53 (I’m not sure what this is. Is it a replacement for DoH/DoT/DoQ, or does it work alongside it?)
DNSSEC (I don’t know what this is.)
EDNS padding (I’m pretty sure I know what this is, it just pads DNS queries. What happens if “Cleartext” is used, does it still pad it?)
As for what I’m looking for in a DNS resolver: I don’t plan to self host it, I would like support for iOS, Linux, and Android, I would like it to be free, I would like EDNS padding, DoH is preferred (although I don’t quite understand the alternatives). I am aware that the DNS resolver will usually be the same as my VPN. Note: I’m not looking for a beginner DNS resolver, I’ve been using NextDNS for a while now, I’m looking for one with strict privacy and security.
I’ve tried looking at Privacy Guides and Wikipedia, but I don’t know enough to make an educated decision.
Any suggestions?
Thank you all!
NextDNS would be my suggestion.
https://my.nextdns.io/
The video linked below is excellent, and runs you through the entire process of setting it up and explaining things as you go along. This process will give you a great deal of control over what filter lists you want to use and what settings will be right for you. And afterwards you can use their web interface to check that you have set up everything correctly and that you are using their service. Free until you hit a certain number of requests per month but I think an individual user will never reach that point, I certainly haven’t and I’m online far too much. Techlore, the producer of the video also comes highly recommended for privacy related information.
The ULTIMATE Guide to Mastering NextDNS! by Techlore
Here is an alternative Piped link(s):
The ULTIMATE Guide to Mastering
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
I use this service on my iphone and i like it a lot.
You have to disable it sometimes when some legitimate service emails you a link with a tracking url that won’t resolve but that is pretty rare and worth all the ad blocking it does.
Yes, it does break things now and again… it really doesn’t like Reddit… but then neither do I! 😆
How does NextDNS compare with controld.com?
I cannot really comment; I’ve never used controld… the only thing I would say is that it does look like it has a clean and simple interface, which for some people might be good but it might reduce customisability.