[vanadium]

Been running it myself for 5-6 months, and other than the occasional (actually, very rare) complaint from the Mrs. that a link she clicked won't go through due to a blocked tracker/analytics intermediary, it's been a peachy time VPNing into our home network so it works just as well on the go.

Our install Pi-Hole points its upstream DNS to 1.1.1.1, with uBlock Origin where possible installed on our devices. Can't imagine going back.

[xenophonf]

What advantage is there in using 1.1.1.1 instead of your own DNS resolver?

[mikestew]

To add to a1369209993's comment, an alternate DNS might be faster (as Cloudflare claims for 1.1.1.1), too. Or more stable than your default DNS. But for me, anyway, I made the switch after Frontier started pulling the NXDOMAIN stunt.

[a1369209993]

Some ISP-provided resolvers fraudulently replace NXDOMAIN responses with NOERROR IN As pointing to (ironically, in this context) advertisment sites.

[xenophonf]

I'm aware of the problems with ISP-provided resolvers. I meant running your own resolver, like named, which queries the root zones itself, supports DNSSEC response authentication, etc.

[a1369209993]

In that case: local resolvers involve actually installing and configuring a recursive dns server, which isn't everyone's idea of fun, whereas 1.1/8.8.8.8 can be set up with a one line config file edit and then forgotten about.

[fwn]

...also censorship. Even my German ISP (Vodafone) apparently reroutes some URLs to servers they control.

Solved it with DNS66.