Hacker News new | ask | show | jobs
by regecks 3084 days ago
An alternative:

I run dnscrypt-proxy locally, encrypting (TLS) all my DNS traffic between me and OpenDNS, also giving me the option for my system resolver to give NXDOMAIN for any names on a local blacklist.

It was remarkably easy to setup, just install the package.

  $ cat /etc/dnscrypt-proxy/blacklist
  fbcdn.net
  facebook.com
  google-analytics.com
  www.google-analytics.com
1 comments
kqr 3084 days ago
Good suggestion. I sandwhich Dnsmasq between applications and dnscrypt-proxy[1] because the opennic anycast servers were too slow otherwise.

[1]: https://two-wrongs.com/secure-dns-on-a-laptop-with-debian.ht...

link