|
|
|
|
|
|
by nykolasz
2841 days ago
|
|
|
Pretty much there are 3 competing implementations for DNS resolution encryption (won't call it security): * DNSCrypt
* DNS over TLS
* DNS over HTTPS
If you are looking for something well tested and well supported, check out DNSCrypt (and the awesome DNSCrypt-proxy):https://github.com/jedisct1/dnscrypt-proxy It doesn't get a much love as it should, but it is probably the best way to secure encrypt your DNS requests right now. The protocol was initially developed by OpenDNS, but many resolvers support it right now (cisco, cleanbrowsing, etc). The list of supporting services is impressive: https://download.dnscrypt.info/dnscrypt-resolvers/v2/public-... On the other hand, DNS over [HTTPS|TLS] are pretty new and don't have as much support, except for a few players. A good list if here as well: https://www.reddit.com/r/sysadmin/comments/976aj2/updated_li... |
|
|