DNS-over-HTTPS: Privacy and Security Concerns

Discussion in 'privacy technology' started by guest, Sep 7, 2019.

  1. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    Krusty, what was the reason to purchase Kaspersky VPN?
    Maybe, it's an Australian thing?
     
  2. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    unless you set up google dns on your system and if it's showing up in dns leak tests, then kaspersky secure connection must be using it.
    you can always use browserleaks.com or dnsleaktest.com to check what dns server your system's using.
     
    Last edited: Nov 6, 2021
  3. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa

    You are absolutely correct.
    My question.
    Could it using public dns servers diminish the anonymity/privacy of this/that VPN?
     
  4. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,240
    Location:
    Among the gum trees
    I sacked Norton on my desktop PC and wanted a VPN. I already have KSC on my laptop, so I couldn't see why not. Around AU$20 (from a third party online store) for 5 devices, unlimited data.
     
  5. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,240
    Location:
    Among the gum trees
    My system uses my ISP servers until I connect to the VPN.
     
  6. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    absolutely. a good vpn service provider must use its own private dns servers. public dns server use makes your vpn connection susceptible to dns sniffing and spoofing.
     
  7. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    Is it $20 a year?
     
  8. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    i see. so it's definitely kaspersky using google dns.
     
  9. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    I have several VPN's.
    Some of them, use exclusively their own Dns servers.
    Some - this locations through public servers, that location - through private ones.
    Let's say, I have a well-known VPNSecure . me - from Australia.
    A very knowledgeable person behind it (but interface just sucks for an average user).
    Lots of locations and going through the public DNS servers.
    Another one (I got just as my VPN hobby on a cheap) - everything goes through the public DNS servers.
     
  10. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,240
    Location:
    Among the gum trees
    That depends where I buy the license. Not from Kaspersky, but hopefully I'll find the same or similar deal again next year.
     
  11. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    I don't know what's going to happen in the future, but...
    In 2014, I've purchased a VPN Unlimited app - lifetime - for a very low price = $30 for 10 units.
    The VPN unlimited - always their private DNS servers and NO ANY KIND OF LEAKS.
     
  12. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    yeah, there are hundreds of vpn service providers in the market and unfortunately only a handful of them are trustworthy and reliable. i don't use commercial vpn's. i have a bunch of subscriptions but i rarely use them, most of the time i use private vpn on residential ip's.
    btw, it doesn't necessarily have to mean that a vpn is solid just because it's using its own private dns servers. but it's sine qua non for a solid vpn to have its own private dns servers.
     
    Last edited: Nov 6, 2021
  13. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    that's a great deal. could be used for casual web surfing.
     
  14. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    And that's - casual web surfing - what I need.
    I know there are a few Wilderssecurity members with lots of knowledge and lots of "special" requirements for their ANONYMITY.
    I have very simple rules.
    A fast - with Wireguard - VPN that is not leaking ANYTHING and using their own DNS servers.
    You've mentioned some web-sites on testing.
    Here are my favorite ones, besides 'browserleaks"
    Do I leak, the classic version,
    bash.ws
    DNS leak test/perfect privacy
    ipleak.org
    ipleak.com/full

    In addition, I use the the computer VPN app, plus, the browser-based VPN (Proxy) - a different company - extension.
    It's enough for me.
     
  15. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    perfect privacy is run by and has ties with neo-nazi scums. so i wouldn't recommend it. but the others are ok.
     
  16. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    Just very recently, I've seen a link at our WildersSecurity about your claim, maybe, it was you that posted it.
    That link was to some old and and not a very representative web-site.
    I don't have Perfect Privacy VPN, but I use its testing facilities.
     
  17. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    https://medium.com/@winstonsmith_/the-problem-with-vpns-c22c9c82cf13
     
  18. noway

    noway Registered Member

    Joined:
    Apr 24, 2005
    Posts:
    461
    FYI: noticed that when DNS over HTTPS is enabled in Firefox (I tried using the Quad9 url for DOH) that some web sites may not function correctly. I noticed it on a streaming site. Sites that break can be excluded from DOH using about:config but a user having these problems might not know why the particular site is not working.
     
  19. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,644
    Location:
    USA
    I've not experienced this. Not that it couldn't happen or that I don't believe it is possible. But it is DNS. I think I would be suspicious of a site that was broken by this.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.