Hacker News Reader

"How I re–over-engineered my home network for privacy and security"

Proceeds to send all his DNS queries to Cloudflare

Still better than sending them to his ISP (or keeping them visible to his ISP no matter the destination). Sure it's not ideal but really very few things are when it comes to home network DNS requests.

I'd love suggestions for better solutions though, I'm sure there's something I haven't considered.

I am a hypocrite as I do the exact same thing, Pi-Hole + Cloudflare. It's just that your title raised my hopes for a better solution.

Sorry :)

I intercept port 53 traffic at my router, tunnel it over to my VPS which runs an unbound instance. Overall I think this setup is better because:

1. It denies my ISP the chance to look at my DNS requests.

2. It doesn't involve yet another third party which may or may not try to monetize my dns requests.

3. It mixes my dns related traffic with that of a datacenter, which doesn't provide a compelling source of data for advertisers IMO.

DoH throws a wrench in the works. Still considering my options on how I want to address it.

Reply on news.ycombinator.com