CloudFlare 1.1.1.1 DNS Service

[Sushubh]

Sign up for a limited public beta for our mobile app!

 

[anubhav11]

How many of you have switched their dns servers to 1.1.1.1 from 8.8.8.8? Pings for me has always been faster on 8.8.8.8

 

[amish]

I switched to 1.0.0.1 and 1.1.1.1 because it offers DNS encryption.

But I hardly used 8.8.8.8 earlier. I was using OpenDNS (which doesnt offer DNS encrytion)

I used 8.8.8.8 / 8.8.4.4 only when OpenDNS had any issue.

 

[Sushubh]

Linux has internal support for DoT/DoH?

 

[amish]

There is no such thing as internal support in Linux because Linux is group of packages

If package is part of base group then you may call it internal.

In linux BIND name server support DNSSEC. But not DoT or DoH.

Firefox users can use DoH but it wont be system level.

However there are packages which can act as DoT or DoH proxy.

 

[Sushubh]

Was wondering if popular distro include support out of the box especially in gui. Like Ubuntu or Mint.

 

[popcorn]

8.8.8.8 had no issues for me but opendns was having lots of trouble.... So shifted back to google.
But even safedns is good.

 

[amish]

Was wondering if popular distro include support out of the box especially in gui. Like Ubuntu or Mint.

Most distro have GUI to change nameserver. So you can install appropriate DNS resolver and change nameserver to 127.0.0.1

The problem is that not all resolvers support all methods. One supports DNSSEC but not DoT / DoH other supports DoT/DoH but not DNSSEC

Domain name resolution - ArchWiki

Once there is proper standard for DNS encryption, I believe most softwares will have out of box support.

 

[Sushubh]

So android pie is the only major os to feature out of the box support for encrypted dns ?

 

[Sushubh]

also which package are you using for encrypted dns on your linux machine! my pi is permanently on vps so i guess encrypted dns is not really required on that.