They are providing DNS with filterlists, optionally with ability to whitelist/blacklist domains. I have been using it occasionally and so far it seems good. I am still trying to balance the configuration between different hosts files but otherwise, the service seems okay. Nextdns Code: https://www.nextdns.io/ https://www.nextdns.io/
MVPS - I remember updating the file believing it was the ultimate TRUE helper, as advised by You guys, must have been 2008 or something... I have configured just now nextdns.io [free account] When I run test.nextdns.io status": "ok" And now my question - when using ggle search engine - will I be shielded from my location being revealed and also will my ISP stop seeing my activity now? edit// dnsleaktest.com shows the answer darn it! edit2// browserleaks.com/dns is more upbeat! which should I trust?
No, you would need VPN for that. Only partially, you would still need VPN, but using 3rd party DNS makes it a little harder for ISP, especially when using an encrypted DNS with eSNI. Windows supports DoH and shortly will DoT. ISP can still see to what domains (IPs) you are connecting, but it provides a better privacy than using ISP's DNS, since ISP does not know, if you requested those or some app or 3rd party link. Code: https://www.cloudflare.com/learning/ssl/what-is-encrypted-sni/ As for the topic, I use free NextDNS on 2 PCs and 2 phones. I basically replaced AV with it, since it can block 99% threats by blocking NRDs, TLDs, tracking, etc. ControlID tries to catch up, but it is paid only.
Tairiku, that's shed some light on my initial area of the unknown, for which I am thankful! I am going to stay with nextdns anyhow for now. I like it! Btw, on Windows - is the client the only way to make it work? To provide the ID we need it. On linux it's so much more tangible for me.
You do not need a client, you can set DoH within the browser or within Windows 11, sometimes even within a router. I use a different DoH within 3 browsers, I block the internet and allow separately only FB and Google within the browser. Code: rem 3 - Require DoH / 2 - Allow DoH / 1 - Prohibit DoH reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "DoHPolicy" /t REG_DWORD /d "3" /f rem Setup DNS over HTTPS (DoH) rem netsh dns show encryption rem netsh dns show global reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableAutoDoh" /t REG_DWORD /d "2" /f
DoT/DoH may help. but as mentioned user can set windows, or better: router, to another DnS resolver/server in web which maks vpn, and dot/doh pointless. anyhow vpn is neither nor comparable to dot/doh. vpn can set up its own dns resolver, but doh/dot are anyhow routed through vpn. vpn has not really security gain, it just changes starting point of your locale network. for me, my router is set to my providers dns, and cloudflare dns as fallback - both are trustable. but i dont use doh or dot nor vpn to have some more security in web while i use personal logings to services where have real names. pretty pointless. vpn for me is only helpful to have content where is blocked for my country.
