Requested behaviour Although there is an experimental implementation of DNS-over-TLS through the use of Stubby, official support coming to Pi-hole would greatly enhance the privacy aspects of the Pi-hole. DNS-over-TLS is in essence an encrypted tunnel through which the DNS-requests are send. Man-in…

Was lange währt, wird endlich gut... Years ago we closed this as out-of-scope: FTL is built on dnsmasq, a UDP DNS proxy, and adding TLS meant heavy rewrites, a crypto-maintenance burden, and the risk of getting encryption wrong. The recommendation back then was to put Stubby or Unbound in front. T…

Dont you visit the IP over a https? So DoH or DoT aren't better that nothing in any way considering security or privacy? What about a DNS resolver? so you don't relay in an intermediate DNS server like cloudflare?

@DanSchaper Your direct competitor already supports it [image] GitHub - AdguardTeam/AdGuardHome: Network-wide ads & trackers blocking DNS server Network-wide ads & trackers blocking DNS server It can be that hard. [image] Encryption Networ…

They aren't our direct competitor.

IP over https doesn't do anything to hide where you are going, which is what DNS is. It tells you where to go. TLS just protects the payload from that IP. Your ISP knows that you went to Amazon, but they don't know what you bought.

I know some people that have moved to adguard home. But you are right this https://www.nextdns.io/ will probably end up eating most of your users, and it supports DoH.

[image] lordraiden: But you are right this https://www.nextdns.io/ will probably end up eating most of your users, and it supports DoH. I don't think so. nextdns is just an external service like Quad9, Cloudflare or Google. For me there is no difference between them, and also no advantage to…

There are quite a few features and advantages that nextdns.io has and pihole doesn't. People is quite excited with it in social media let's see how it evolves, is something that fits to any user since it doesn't require hardware or any expertise like pihole. I agree with you that the best would be…

How do they solve the privacy issue? Do you VPN all your traffic through them, or do they just obfuscate the DNS transaction and still leave you completely trackable and identifiable through your ISP and every server that handles your packets from your local workstation to the end server? (Hint, run…

[image] lordraiden: well if you would care about privacy you would have implemented a DNS Resolver to call root servers directly over a encrypted channel. Which of the root servers support encrypted DNS queries?

[image] lordraiden: Dont you visit the IP over a https? So DoH or DoT aren’t better that nothing in any way considering security or privacy? You have to connect to the IP before the encryption begins. So, after the browser has the IP address for the domain it seeks, it requests that IP addr…

Pi-hole Userspace

Implement DNS-over-TLS capability in Pi-hole

Feature Requests

tls

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled