Hacker News Reader

You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP.

If enough people switch to DoH (as would be needed for DoH by default to have a measurable effect) and the data is even slightly valuable, unscrupulous ISPs could still use SNI, or even just reverse IP lookups to track your movements.

View on HN

> You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP.

It's not that I necessarily trust my ISP, I don't want to be forced to also trust Cloudflare (both for privacy and availability).

So no, I don't use 1.1.1.1, I run my own recursive name server.

That also works for avoiding your ISP serving your DNS requests.

I also run my own recursive resolver but this doesn't prevent snooping by the ISP as the recursive requests go through its network.

Reply on news.ycombinator.com