101010.pl is one of the many independent Mastodon servers you can use to participate in the fediverse.
101010.pl czyli najstarszy polski serwer Mastodon. Posiadamy wpisy do 2048 znaków.

Server stats:

488
active users

#dnsoverhttps

0 posts0 participants0 posts today
Continued thread

Bruh I'm still so confused about this - can any #networking people or anyone with #PiHole/#Pi-hole experience chime in and tell if my goal is privacy, and if I were to prioritise one, it'd be better privacy against my ISP, what should I use on my Pi-hole DNS server?

-
#Unbound as a recursive DNS server
- Enable
#DNS-Over-TLS (#DoT) using Unbound and upstream DNS provider set to something like #Cloudflare
- or Enable
#DNS-Over-HTTPS (#DoH) using #Cloudflared

I initially thought you could have Pi-hole be all three but I don't think so, no?

If any unethical network operator (or government) can disable DoH on clients with a simple DNS flag, then what problem does DoH solve?

It stops you from blocking ads on the DNS level. That's all it was ever supposed to solve.

Disable DoH. Reject DoH.

#dns#adblock#pihole

J'ai testé 5 minutes Windows 11 dans une VM VirtualBox pour essayer de voir comment y configurer #DNSoverHTTPS à l'échelle du système :
- Ça rame comme pas permis
- Impossible de d'améliorer ça (je pense que c'est la transparence qui fait ramer, mais faut une licence pour désactiver)
- Impossible de monter la résolution à plus de 1280×960 (licence toussa)
- Système en français, clavier en QWERTY, parce que
- Trouvé les paramètres DoH : marche pas, prend pas en compte les modifs

VM effacée

Die schwierige Suche nach Quantencomputer-sicherer Kryptografie

Quantencomputer der nächsten Generation würden asymmetrische kryptografische Schlüssel schnell knacken. Das gefährdet auch das weltweite Domain Name System.

heise.de/news/Die-schwierige-S

#Algorithmen #DNS #DNSoverHTTPs(DoH) #DNSSEC #GitHub #Internetprotokolle #Quantencomputer #Security #Verschlüsselung

Replied in thread

@hermogenes I pretty much agree with you, actually. I have used #Firefox for years and appreciated what goes into it, and of course their recommendation is still... Firefox, with changed settings.

That said, I've recently tried out #LibreWolf, itself a Firefox fork. And, wow. The privacy game is so much nicer out of the box; I need far fewer plugins and it's all just... working. Very, very impressed.

Re #DNSoverHTTPS (#DoH), I guess it's: who's your adversary? Sketchy wifi or CloudFlare?

#OpenDNS #DOH (doh.opendns.com) is weird:

  • returns IPs from a different country, whereas dns.opendns.com returns the closest IP possible;
  • traceroute can't reach it even with a hundred hops. The first 10 or so hops are the same as with dns.opendns.com, but then it seems to disappear into some abyss.

Google and CloudFlare don't have these problems, so if I want #DNSoverHTTPS, I have to decide between these two. 🤔 (NextDNS is not an option because I don't need filtering and don't want to register an account with them.)

[Repost due to dead URL]

There was recently a lot of news about DNS over HTTPS. Some people say it's bad for privacy because it centralizes the DNS requests on Google, Cloudflare and Quad9.

Time to change that and run your own DNS over HTTPS server. I spend some time today in writing, documenting and arranging a small container setup to allow you to do this:

git.shivering-isles.com/contai

git.shivering-isles.comProjects · Container Library / DNS over HTTPSProvides container images for an DoH proxy. https://dns.shivering-isles.com/dns-query