The truth about dnscrypt-proxy and DNSSEC?

I started out, using the information in the wiki, and build on top of that, looking for dnscrypt-proxy servers that use port 443, support DNSSEC, don't keep a log and have a secure valid certificate.
Compared to the wiki, I've added some settings, to enable logging of dnscrypt-proxy messages, (/var/log/dnscrypt-proxy.log) and improve privacy (ephemeral-keys). I've also changed the restart method. I changed the port (wiki uses port 41) to a port, unique for every proxy, this to ease debugging, I just don't like using ports below 1024. The port numbers have been suggested by the developer of dnscrypt-loader, I don't recommend using this method, read this to find out more (this entry also contains a solution for the random number problem). Some of the additional settings have been suggested by qpad. To make life easier, I provided the rar file, just to save some time for potential users. The resolvers I use, are resolvers that get me a working DNSSEC solution, my ultimate goal. There maybe other resolvers that work!

The fourteen eyes countries: I'm living in one of them, and 3 out 4 dnscrypt-proxy servers I use are in one of those countries. I'm fairly convinced that big brother is watching all of the time, nothing you can do about it, apart from going offline altogether. It isn't even my goal to stop them. The goal I'm trying to achieve is to stop my provider from serving me personalized ads (they do that over here) and to ensure the DNS replies are coming from the resolver of my choice. Of course, the question remains: do you trust the dnscrypt-proxy servers?
Using multiple resolvers (I've read somewhere you can use up to six, without recompiling) makes it harder for big brother to track my internet activity, the down side of it is of course it may just increase their interest.
That being said, It may be a good idea to use dnscrypt-proxy servers outside the fourteen countries, but your request may still be noticed (you have to get out of the country first - if you live in one of them).

1 Like