Hacker News new | ask | show | jobs
by majui 2730 days ago
Misleading claim: any external DNS server is not private. Your requests are directed to a third-party. I suspect data-mining you is how they pay their server bills.

The correct technical solution for privacy is running your own DNS server locally.

2 comments

https://1.1.1.1/

> We will never sell your data or use it to target ads. Period.

> We’ve retained KPMG to audit our systems annually

On Reddit I'd never dare to say this. Cloudflare is widely hated and painted as the enemy of privacy.
I use OpenDNS, but I see they are now owned by Cisco. May need to reevaluate.
> The correct technical solution for privacy is running your own DNS server locally.

The ISP can still see requests the local DNS server sends to the Internet

If you use DNS-over-HTTPS on your local machine or LAN, your queries would be encrypted and safe from your ISP.

As mentioned in some other replies here, you can use vanilla DNScrypt [0] or cloudflared [1], or Pi-Hole with either one enabled, etc.

[0] https://dnscrypt.info/implementations/ [1] https://developers.cloudflare.com/1.1.1.1/dns-over-https/clo...