Importance of encrypted DNS? (lemmy.dbzer0.com)

submitted 1 year ago by Karate_Jesus420@lemmy.dbzer0.com to c/piracy@lemmy.dbzer0.com

32 comments fedilink hide all child comments

Sorry if this is a dumb question, but how important is using one of the encrypted DNS services from the megathread? I've just been using Google's DNS servers directly on my router, and have yet to have any issues. Have I just been lucky?

Also, 🫡 to dbzer0 for migrating the community to Lemmy!

you are viewing a single comment's thread
view the rest of the comments

[-] qazwsxedcrfv000@lemmy.unknownsys.com 2 points 1 year ago* (last edited 1 year ago)

You have forgotten Akamai... Google, Microsoft, Meta, and Amazon... Also Equinix and descendants of those once nationalized telephone and telegram operators, e.g. AT&T, BT, NTT, etc.

[-] meteokr@community.adiquaints.moe 3 points 1 year ago

Upon a quick search here it seem cloudflares does roughly 1/5th of all websites measured. Still pretty huge. You can use whatever serves your own needs best, but I try to avoid using these kinds of megacorp "free" services. Its not too hard to run your own authoritative DNS as well, since DNS is decentralized natively.

[-] qazwsxedcrfv000@lemmy.unknownsys.com 3 points 1 year ago

If you check the Submarine Cable Map, you can find all the cables we have laid under the sea and their owners. The Mozilla Internet Health Report 2019 contains a map that shows cable ownership by the big 4 aka Google, Microsoft, Meta, and Amazon. The map was updated to contain data till 2021. The L1 is largely owned by the telecom operators, private or national. Cloudflare is just L2 and L3 (maybe some L7).

[-] meteokr@community.adiquaints.moe 2 points 1 year ago

I think we're at a misunderstanding. If a business owns a road, and a different business owns a shipping company that uses the road. If I want to ship something, I can choose which shipping company to use, and I cannot choose which roads they use. So given my options, wouldn't I want to choose the best shipping company for my needs?

In this analogy, I don't trust Cloudflare shipping company. Especially with how often they are used for SSL termination. This community specifically, places a massive importance on verifying and checking VPN providers, why not be equally as stringent with DNS providers?