DNSCrypt for Windows official release

Discussion in 'privacy technology' started by funkydude, May 9, 2012.

Thread Status:
Not open for further replies.
  1. funkydude
    Offline

    funkydude Registered Member

  2. funkydude
    Offline

    funkydude Registered Member

    Re: OpenDNS for Windows official release

    It actually has a GUI now, far more user friendly :) It appears to install as a service.

    This should be viable enough for installing on other PCs I reckon, will see how it goes.
  3. Victek
    Offline

    Victek Registered Member

    Re: OpenDNS for Windows official release

    Yes, simple GUI and very easy install. It changes the adapter DNS to the local host IP - 127.0.0.1 - to redirect requests. I'm surprised that Comodo Firewall didn't pop a warning. Fortunately Webroot Secure Anywhere did.
  4. ratchet
    Offline

    ratchet Registered Member

    Re: OpenDNS for Windows official release

    Ive had my router DNS settings set for their servers for years. Should I install this prog or leave things alone?
  5. Victek
    Offline

    Victek Registered Member

    Last edited: May 9, 2012
  6. learningcurve
    Offline

    learningcurve Registered Member

    Re: OpenDNS for Windows official release

    Thanks for posting this info, funkydude.

    Been using the windows beta with no problems and just downloaded the new release.
  7. funkydude
    Offline

    funkydude Registered Member

    Re: OpenDNS for Windows official release

    Yup, sorry :) Asked a mod to fix it.
  8. Victek
    Offline

    Victek Registered Member

    Re: OpenDNS for Windows official release

    Fixed! (also moved to the Privacy Technology forum :) )

    I'm running the new DNScrypt windows client on two computers now. So far it has been flawless - no slowdowns or other anomalies. I'm not seeing any downside. It's a good addition to online security AFAICT.

    Note: I'm getting a UAC prompt during bootup in Windows 7x64 with UAC set to Max (Always Notify). Is there a way to configure this so it doesn't trigger a prompt?
    Last edited: May 10, 2012
  9. funkydude
    Offline

    funkydude Registered Member

    Re: OpenDNS for Windows official release

    That's one of the few issues I've noticed, I made a post about it on their forums.
  10. travelerRoute80
    Offline

    travelerRoute80 Guest

    Re: OpenDNS for Windows official release

    Do you have a screenshot ?
  11. Victek
    Offline

    Victek Registered Member

    Re: OpenDNS for Windows official release

    Here's the main window:

    opendnscrypt.jpg

    This screen is of the Mac version, but the Windows version is essentially the same.
  12. klarm
    Offline

    klarm Registered Member

    guys. I still don't get this fully.
    I've been using OpenDNS for a while. I understand the need/usage of OpenDNS and DNSCrypt but I don't get it how to properly utilize it.

    I have my home router set-up manually on OpenDNS so if I understand correctly I now only need to install DNSCrypt client on all the machines on this network and enable 2 options inside?
    Are there some additional setting in OS (winXP and Win7) / each machine I need to set-up?

    and can you please point me into direction how to fully understand what is DNSSEC and how to implement it?

    thanks.
  13. Victek
    Offline

    Victek Registered Member

    When you install the DNScrypt client it uses OpenDNS by default (note the check in the box in the UI). I don't believe it's necessary to set OpenDNS servers in the router, but since you've already done it it shouldn't hurt. In the network adapter IPv4 DNS server settings any previous entries are replaced with 127.0.0.1 to redirect DNS requests to the DNScrypt service. In other words you install the client and you're done :)

    You and me both. From what I've read there is already some support for DNSSEC in Windows 7, but I don't know what, if anything, needs to be done at this point to take advantage of it in our client OS's.
    Last edited: May 11, 2012
  14. klarm
    Offline

    klarm Registered Member

    thank you for info.
  15. Keller
    Offline

    Keller Registered Member

    Am I right in thinking that, when one connects to a VPN, making that initial connection requires a DNS request? After this - that is, once connected to a VPN - all DNS requests should be resolved over the VPN.

    If this is correct, then is it also correct to say that DNSCrypt would be useful even for VPN users, to encrypt that initial DNS request that is made when connecting to a VPN?
  16. TyRizian
    Offline

    TyRizian Registered Member

    I am thinking about using this, what is your opinion on this vs. Comodo Secure DNS?
  17. kupo
    Offline

    kupo Registered Member

    In terms of protection (malware sites, phishing, etc), just compare OpenDNS and Comodo Secure DNS. What DNSCrypt does is encrypt the connection between OpenDNS and you, preventing DNS poisoning. Currently, only OpenDNS is supported. It's up to other providers if they want to add support to this.
    So, you really can't compare Comodo Secure DNS with this tool ;)
  18. tlu
    Offline

    tlu Registered Member

    No, it seems that it works also with other DNS providers.
  19. Victek
    Offline

    Victek Registered Member

    That sounds right and would be desirable for the stealthy among us :ninja: Actually I think DNScrypt is not made redundant by a VPN, because although the DNS requests are hidden (along with all the other traffic) by the VPN encryption between one's PC and the VPN provider the requests themselves would be made in the clear by the provider unless the provider was also encrypting DNS. Can anyone comment/confirm?

    By the way, are others noticing that the DNScrypt client uses a fair bit of CPU? I'm hoping they can lighten it up going forward.
  20. funkydude
    Offline

    funkydude Registered Member

    Nope, 0% here. It will probably depend on how many queries your machine is sending.

    Not if you connect to the VPN via an IP instead of a name.
  21. TyRizian
    Offline

    TyRizian Registered Member

    I don't know what you guys consider light, but I find DNSCrypt to be a bit heavy on memory consumption. I don't want to get rid of it, because it is extremely beneficial to have. I just find it a bit heavy for my tastes.
  22. popcorn
    Offline

    popcorn Registered Member

    This is working well for me, however I prefer to use either openNIC DNS or the privacy foundations DNS servers.
    Is there away to configure your own DNS thru DNScrypt ?
    What are peoples opinion on OpenDNS as a provider when it comes to privacy ?
  23. funkydude
    Offline

    funkydude Registered Member

    I take it back, I've seen it use an entire core at one point. No idea what's happening but the funny part is I preferred the alpha version, no issues with it at all just wasn't "user friendly".
  24. Hungry Man
    Online

    Hungry Man Registered Member

    I haven't noticed any significant CPU increases. I'm surprised anyone is, must be a bug since I can't imagine this would take very much time at all.
  25. nuphorce
    Offline

    nuphorce Registered Member

    What is the advantage of using DNSCrypt? If I connect directly to the Internet will it stop the ISP knowing what sites I am requesting?

    If I use a DNSCrypt and a VPN will it stop my ISP seeing what VPN server I am connecting to?
Thread Status:
Not open for further replies.