If I change my ISP default DNS...

To OpenDNS or any similar service, will my ISP still knows the websites I am accessing in my machine?

What is the benefit of changing my DNS to Google/OpenDNS/other companies, anyway? I mean, in terms of privacy?

Note: I don't use VPN/proxies here.

 

I assume they'd still know the IP addresses.

I don't think switching to a different DNS is about privacy, but rather about speed and/or security. They may be faster than the ISP's servers, and some of them can filter reported malware/phishing sites. It's not perfect, of course, but it's another layer of protection and it's easy to switch. It's convenient because it can be done in the router to cover all computers in the network, and it requires no software to be installed (unless you want to use DNSCrypt for OpenDNS).

Also, some of them like Norton have servers that can filter content like porn, gambling, drugs, etc. if you want.

 

Conversely, some resolve domains that mainstream DNS servers don't

 

In terms of Privacy, I would think using foreign, privacy oriented DNS like Chaos Computer Club or German/Swiss Privacy foundation, protects you from someone at the DNS provider, allowing an agency to go through it's records. You would assume providers like above, would fight any such attempts...unlike, say, a US ISP.

As far as what goes out your wire, unless you are using a VPN and the redirect-gateway def1,dhcp-option DNS... in OpenVPN...I'm not sure if the DNS request goes out 'in the clear' through your ISP. Hopefully a network guru can chime in.

What I mean is: I would assume that just using a privacy DNS over a regular ISP connection - would allow the ISP to see the resolved names and addresses. But if you are on a VPN, but choose to specify your own DNS, do the requests travel through the VPN...or out through your ISP? I would think you are still protected, as the VPN should route all traffic...assuming you took care of any DNS Leak problems.

PD

 

If you're not using VPNs or proxies, your ISP can see everything.

 

Nothing in terms of privacy. For security, if the alternate DNS provides filtering of bad sites, etc...

When combined with a VPN/proxy, doing so helps a great deal in terms of privacy though. It helps prevent against leaks. If you use a VPN/proxy but keep your ISP assigned DNS servers, they could still sniff out your activity.

Using either measure by itself will not protect your privacy. Combining both will.

Still, I'd go with the alternate DNS for the security aspect mentioned. Plus they are "usually" quicker. As the ISP assigned ones are more bottlenecked by the "average user", which makes up 98% of people sitting at a box.