69
Importance of encrypted DNS?
(lemmy.dbzer0.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 Jun 2023
69 points (97.3% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54390 readers
633 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
DNS doesn't really matter for piracy, but it can help improve privacy and security.
DNS over TLS will ensure all your dns requests are encrypted, and most clients actually validate the certificate so attempts to hijack the connection are not easily possible.
Firefox can bypass your systems DNS and use DoH. I think windows also supports DoT.
For Linux, systemd networkd and resolved also support DoT.
Keep in mind that some software does not obey system dns settings and can do their own DNS.
I've been entering the primary and secondary DNS addressed in my router settings, so it applies to the whole network. I suppose that won't work for DNS over TLS, DoH, or DoT, then? Unfortunately, my router doesn't support flashing dd-wrt, so I'm stuck with Netgear's firmware.
It only applies to network devices that respect the setting. However, if you are using windows, for machines you care about, you can just configure DoT.
https://www.linkedin.com/pulse/secure-your-internet-connection-dns
Android also supports DoT, as does firefox as I mentioned above. For any given device you can search for "android DNS over TLS" and get info to see if it can be easily turned on.
However, also keep in mind if you are using Windows, then using DoT is like putting a bandaid on a gushing wound. The underlying OS is not trustworthy.