You are viewing a single thread.
View all comments View context
8 points

What if you force a dns, like say cloudflare?

permalink
report
parent
reply
8 points

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server. So regardless of which DNS server you use, your ISP can see all your DNS lookups. For any amount of privacy for DNS, the minimum is something like DNS-over-TLS or DNS-over-HTTPS, the latter of which Firefox uses by default in some countries and supports everywhere.

permalink
report
parent
reply
6 points

I mean with this + DNS over HTTPS can we guarantee the isp can no longer see anything?

permalink
report
parent
reply

They’ll only see the IP you’re connecting with and encrypted data packets being transferred on.

permalink
report
parent
reply
5 points

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server.

Not just readable… The ISP can inject their own responses too. Regular DNS is both unencrypted and unauthenticated, with most clients not enforcing DNSSEC.

permalink
report
parent
reply
3 points

so you’re saying self host an authoritative DNS server

permalink
report
parent
reply
4 points

It’s easy to setup something like AdGuard Home that provides malware blocking, ad blocking if you’re interested in that, and supports DNS-over-HTTPS out of the box (unlike PiHole, which needs a bunch of manual setup)

permalink
report
parent
reply
3 points
*
Removed by mod
permalink
report
parent
reply

Firefox

!firefox@lemmy.ml

Create post

A place to discuss the news and latest developments on the open-source browser Firefox

Community stats

  • 1.5K

    Monthly active users

  • 926

    Posts

  • 17K

    Comments

Community moderators