Privacy

37159 readers

391 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

DNS Applications vs Private DNS (lemmy.ca)

submitted 21 hours ago* (last edited 21 hours ago) by figurine8051@lemmy.ca to c/privacy@lemmy.ml

5 comments fedilink hide all child comments

Am always confused about use an app like rethinkdns, invizible pro, adguard, etc. to manage dns requests on my phone or just use the private dns ?

Is there any privacy advantage or security concern over them ? When i use an app, all dns queries can be routed through my preffered dns (like in a bloated phone all tracking requests can be blocked) ? Private dns is easy for the system to bypass ?

I always use rethinkdns and block bypassed dns, so i think now every dns is routed through rethinkdns and its impossible to cause a leak. Is that a myth as no dns app can provide that much privacy or security ?

How effective is an application firewall than a network level firewall like nextdns ?

Allover question is, may i use a application firewall or network level firewall ?

you are viewing a single comment's thread
view the rest of the comments

[–] knfrmity@lemmygrad.ml 1 points 15 hours ago

The Android private DNS setting is just for a DNS-over-TLS resolver. The only thing about it that's private is your queries are encrypted en route to the server (traditonal DNS is cleartext). There's no filtering or blocking.

Some Android versions also have a hard coded DNS server set to Google, which based on my tinkering uses DNS-over-HTTPS. Not only is it annoying but I find it awfully insecure - even if you think you have stuff locked down it might just not be. I fixed that issue by blocking all DNS-over-HTTPS servers in my router, and also have all outgoing requests to port 53 redirected to my local resolvers (Pihole + Unbound).