Is there a safe alternative to OpenDNS?

Discussion in 'privacy technology' started by Escalader, Nov 8, 2012.

Thread Status:
Not open for further replies.
  1. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses
    I use the subject DNS service. It works BUT I've come to a point where I'd like to make a change.

    BUT to what? Any alternatives?
     
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
  3. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,852
    I don't understand, what's unsafe about it?

    If anything, it is the safest DNS service in existence because it is compatible with DNSCrypt.
     
  4. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    OP didn't say that OpenDNS is unsafe.
     
  5. Mman79

    Mman79 Registered Member

    Joined:
    Sep 19, 2012
    Posts:
    2,016
    Location:
    North America
    Norton perhaps? Unless you're looking specifically at paid services. My opinion is that OpenDNS as a free service is all but useless in security. If there is no malware domain protection, then it's mostly useful if your ISP DNS is terrible.
     
  6. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
  7. PJC

    PJC Very Frequent Poster

    Joined:
    Feb 17, 2010
    Posts:
    2,959
    Location:
    Internet
    What's wrong about the DNS services offered by
    Norton and C-O-M-O-D-O ? o_O
     
  8. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses


    Right, I just want a change.

    BTW I'm not saying there is anything wrong with these thread suggestions! :D
     
  9. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    Well, there are censorship issues ;)
     
  10. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,121
    Location:
    USA
    Censorship issues related to which service?
     
  11. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,121
    Location:
    USA
    What do you mean by "safe"? Are you wanting a DNS service that filters out bad sites? If you're just looking for performance I like Google DNS. For best security I currently use OpenDNS with their DNSCrypt addon.
     
  12. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses

    I've been on OpenDNS for years now BUT I'm not sure if I have this DNSCrypt addon.

    What is it's purpose?
    In general terms how does it work?

    https connects are already encrypted?
     
  13. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
    Some info and answers here:

    http://www.opendns.com/technology/dnscrypt/
     
  14. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,188
    Location:
    USA
    Why switch from a good thing? OpenDNS is probably the most secure DNS out of the ones listed.
     
  15. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    I'm not going to get into this issue, because it's political, and inappropriate here. Also, doing so would invoke Godwin's Law ;)
     
  16. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,121
    Location:
    USA
    DNSCrypt is a separate app that works with OpenDNS. It specifically encrypts DNS traffic for all web sites. I feel this adds some security when browsing over open wifi networks. It may be redundant for HTTPS sites. A VPN is a better solution for open wifi IMHO, but DNSCrypt is a good idea if a VPN is unavailable.
     
  17. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,121
    Location:
    USA
    It's unavoidable. You've already started down that road by backing away from the topic. Isn't that exactly what they used to do? :D
     
  18. tlu

    tlu Guest

  19. tlu

    tlu Guest

    Yes, but this site says:

    So it should also work with other DNS providers but I haven't tried that yet, though.
     
  20. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Norton DNS. :thumb:
     
  21. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,852
    Incorrect, those files are the standalone proxy which aren't user friendly. He was linked to the Windows GUI installer, the page he linked has the latest version of that.
     
  22. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    Yes, it is an important issue. Each group, nation, etc has its unmentionable, off-limit topics. And each does what it can to suppress infringing content. One strategy is DNS blacklisting/takedown. Using alternate "uncensored" DNS servers helps one get around that.

    What's problematic is that technological discussions often drift into politics and morality.

    Anyway, that's why I mentioned The German Privacy Foundation's DNS servers.
     
  23. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses

    Sorry guys but this is my thread and I don't want it deviated into cencorship and have the thread hyjaked that way. ;)

    If somebody want to start their own thread on that go for it! Good luck.

    I'm not looking to be pushed to stay with OpenDNS I'm wanting to have an alternative.:D
     
  24. TomAZ

    TomAZ Registered Member

    Joined:
    Feb 27, 2010
    Posts:
    1,002
    Location:
    USA
    I've used OpenDNS for quite some time, but without the addition of DNSCrypt. After installing DNSCrypt virtualized just to try it out, I noticed that the GUI is very simple with only four check box options. So, because I'm already using OpenDNS, does the box "Enable OpenDNS" need to be checked -- or is that already assumed and should be left unchecked?

    Also, is there any way to be notified of updates to DNSCrypt -- and is an updated version just installed over the top of an older version?
     
  25. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,121
    Location:
    USA
    I would keep the "enable OpenDNS" box checked. The only box to leave unchecked (unless needed) is the "DNSCrypt over TCP 443". If you look at the lower edge of the GUI window it states the version and also "latest". When I started using it they were at beta 0.0.5 and I can't remember if the next version was pushed out automatically or not. You can also check version information by clicking on the "release notes" tab.

    Edit: I just confirmed that if you turn off "use OpenDNS" in the GUI it does in fact disable OpenDNS and hand off DNS lookups to the router.
     
Loading...
Thread Status:
Not open for further replies.