[rakah]

You seem like you may know what you're doing. Would you mind sharing who your DNS provider is? Do you pay for recursive service?

I don't trust my ISP, so I'd prefer not to use their DNS or to pass requests up to root servers over cleartext. I also had some performance issues with root server requests since they have to chase the authoritive servers.

Right now I'm sending TLS requests to cloudflare, but obviously since I'm not paying for them, I'm the product.

[neurostimulant]

OpenDNS offers paid dns service (if paying for dns give you peace of mind). Alternatively, you can rent a vps and run your own recursive dns server there, but make sure your vps provider allows running recursive dns to avoid account suspension.

[josteink]

> I don't trust my ISP

Then switch to one you do trust.

[fooqux]

I'm not sure where you call home, but at least in the US, that is impossible for many people. Or rather, impossible without physically moving your house.[0]

Especially if you do not count satellite, which I do not. My house has one crappy DSL 18Mbps provider and that's it. Their way or the highway.

https://arstechnica.com/information-technology/2016/08/us-br...

[AnIdiotOnTheNet]

You can just point to other DNS servers instead of your ISP's. Some providers might intercept and redirect those queries, but I haven't ever run across any.

[judge2020]

You could, but DoH exists to provide a crypto-based guarantee that they can't even passively monitor the DNS requests you're sending to the alt. resolver.

[byuu]

DoH only hides the domain name lookup. You still connect to the other server by IP. Even $2.50/mo VPS plans offer a unique IP these days, and building a database of IP:hostname is extremely trivial, especially for ISPs that already run DNS resolvers.

But let's be real: the internet is quickly becoming a walled garden, so having access to DNS requests is mostly only going to give you a billion facebook.com + twitter.com + youtube.com + google.com + google-analytics.com lookups anyway.

[josteink]

I live in Norway, Europe and around here ISPs compete for my business.

Kinda like a “free market”, except it’s “regulated“ to not allow scamming end-customers. I find it quite enjoyable.

Maybe you in the US should fix the root cause of your problem (legislation) instead of deploying rogue technology making life complex for everyone else?

[growse]

Here in the UK, I have a choice of many different ISPs, all of whom (in theory) compete for my business.

Guess what? The big ones are still awful: hijacking DNS, providing horribly congested service and laughable "support". All in the race to cut as much cost and increase profit in the name of being able to undercut the next guy by £1/pm. Competition isn't the pancea you seem to think it is.

> Maybe you in the US should fix the root cause of your problem (legislation) instead of deploying rogue technology making life complex for everyone else?

Maybe you should use a different browser. Or learn how the one you're using works at least.

[SketchySeaBeast]

That kind of feels like answer the question "why is there cellophane on the counter" with "Why don't you go to apple and get them to change their packaging to reduce plastic waste?" I mean, yeah, that's a solution, but you're requiring a massive effort, when really that doesn't address your problem at the moment.

[fourthark]

It would be interesting to see stats on this.

I would guess between monopolies and hostile governments, more people worldwide have no choice, and it's a good default, but I don't know.

In any case, both Firefox and Chrome should make it super clear to users that they are doing this.

[judge2020]

> Especially if you do not count satellite, which I do not.

Hopefully starlink will change this :)

[fooqux]

One can hope. Still, that's at least four years out still, and I have my doubts he'll launch on time.

[ncmncm]

Quoting $80/mo, thus far.

You're not just getting connectivity, though. You are getting Mars. Or, buying it for somebody else, really.