4 ms·
That’s fine if you don’t care about privacy as long as you’re conscious about that. Dnscrypt is simple enough to use otherwise
by abcdefg12 3mo ago
That’s fine if you don’t care about privacy as long as you’re conscious about that. Dnscrypt is simple enough to use otherwise
- exiguus 3mo agoHow do you use DNSCrypt on Android or iOS? On my notebooks, I run two Docker instances of AdGuards dnsproxy, using my own DNSCrypt resolvers as upstream servers. This setup provides anonymity from the resolver and protects against man-in-the-middle attacks, since DNSCrypt authenticates DNS responses. However, root DNS queries from the upstream remain unencrypted. Additionally, not all nameservers support DNSSEC, so a fallback is often needed. Which can still leave the upstream vulnerable to man-in-the-middle attacks. Of course, DNSCrypt is more secure (authentication, no bootstrapping), faster and anonym (against the resolver). But i think it is still not useable for "normal" people. And as a provider, the setup is more complex then DoH, DoT or DoQ, because of cert rotation and the DNS entries.