News for hackers. Stuff that matters.

A comment on Comcast, Mozilla strike privacy deal to encrypt DNS lookups in Firefox. Parent comment

Re:Comcast, Mozilla strike privacy deal to encrypt DNS looku... by sandworm101 on Thursday June 25, 2020 @01:00PM (#23642786)
>> Even if you change your DNS server from the default to 1.1.1.1 or whatever, your ISP can and does still read and/or intercept these requests.

Not if VPNs/firewalls are properly implmented. Plugging DNS leaks is security 101.

[ Parent | on HN ]
Re:Comcast, Mozilla strike privacy deal to encrypt DNS looku... by treve on Thursday June 25, 2020 @03:15PM (#23644369)
I get that VPNs are considered more trustworthy by some (although so many also have shoddy records/ownership), but it's still 1 extra party to trust vs. just your DNS provider.
[ Parent | on HN ]
Re:Comcast, Mozilla strike privacy deal to encrypt DNS looku... by efreak on Saturday June 27, 2020 @02:36PM (#23663677)
If your VPN is only being used for DNS queries, then they don't have much useful data there. I've recently seen instructions for setting this up on free cloud instances from AWS/Azure/etc. If the only traffic is DNS wrapped in VPN, it should stay within the free tier (especially if you add local caching, but even that shouldn't be necessary)
[ Parent | on HN ]