Hacker News Reader

Comment by blitmap | Hacker News Reader

I recently set up a dns-over-https (doh) proxy on my router to forward dns requests to 5 resolvers, that also use dnssec.

I wish Firefox would expose the option from about:config in its user-friendly Preferences page so it will respect the "system default" (the advertised dns server).

I am - for no legitimate reasons - avoiding Cloudflare as a resolver. As far as I know Firefox uses Cloudflare.

View on HN

Have you been able to find a trustworthy public DoT resolver?

I really want to use uncensoreddns.org, but availability has been a little flaky in the past. I'm not sure about Quad9. Google and CloudFlare are obviously out of the question. What else is there?

> Have you been able to find a trustworthy public DoT resolver?

It really depends what you view as being "trustworthy". Outside of the US good enough? Or do you want non 5/9/14-Eyes? (https://en.wikipedia.org/wiki/UKUSA_Agreement#9_Eyes,_14_Eye...)

Let's start with "not Google-levels of creepy" and work up from there. I want someone who's not harvesting data, or engaging in censorship.

Check out this list in privacytools.io: https://www.privacytools.io/providers/dns/

Yes, well i trust this one:

DoT: dns.digitale-gesellschaft.ch

DoH: dns.digitale-gesellschaft.ch/dns-query

Source:

https://de.wikipedia.org/wiki/DNS_over_HTTPS

https://de.wikipedia.org/wiki/DNS_over_TLS

https://www.digitale-gesellschaft.ch/dns/

Sorry, for not being available in the en-wiki

Hadn't seem them before, very interesting. Vielen dank.

Just a year old and located in Zurich,

OpenNIC has a few servers supporting either DoH or DoT or both.

Reply on news.ycombinator.com