J4MES
June 6, 2021, 2:34pm
1
Will Pi-Hole ever natively support DNS encryption built in rather than having to install cloudflared?
jfb
June 6, 2021, 2:47pm
2
There have been several feature requests.
Requested behaviour
Although there is an experimental implementation of DNS-over-TLS through the use of Stubby, official support coming to Pi-hole would greatly enhance the privacy aspects of the Pi-hole. DNS-over-TLS is in essence an encrypted tunnel through which the DNS-requests are send. Man-in-the-Middle (MitM) attacks on this traffic would result in captured encrypted data.
DNS-over-TLS (port 853) is not to be confused with DNS-over-HTTPS (port 443) and DNSCrypt (port 53). DNS-over-HTTPS…
Support out of the box would be amazing
DL6ER
June 6, 2021, 2:54pm
3
It depends on if it will get implemented in dnsmasq
. If this happens, it'll be added to Pi-hole for sure, too.
There are many arguments against encrypting to a single upstream provider and instead run your own recursive resolver . See the linked guide for further details.
system
Closed
June 13, 2021, 2:55pm
4
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.