From 072a2c6522bf239eaa5e79ff0eb6846ebb53c85d Mon Sep 17 00:00:00 2001
From: nitrohorse <1514352+nitrohorse@users.noreply.github.com>
Date: Fri, 9 Aug 2019 08:00:57 -0700
Subject: [PATCH] Add Encrypted DNS providers table (#1097)
* Add ICANN DNS providers table
* Iterate on feedback
* Iterate on feedback
* Protocol sorting hack
* Add Cloudflare warning
* Update descriptions, add DNS-over-Tor description
* Update Cloudflare URL
* Remove DNS-over-Tor refs for now
* Update table description
* Update source_code.md
* Some cleanup
* Add link to CloudFlare's privacy policy
* Update table description
* Use Yes/No for consistency with other tables
* Update source_code.md
* Update Cloudflare URL
* Update table description
* Update CZ.NIC data value
* Update DNSCrypt grammatical error
* Add DNSCloak and Stubby to source_code.md
* Add comment to clarify data value
---
_includes/sections/dns.html | 280 +++++++++++++++++++++++++++++++++++-
source_code.md | 33 ++++-
2 files changed, 300 insertions(+), 13 deletions(-)
diff --git a/_includes/sections/dns.html b/_includes/sections/dns.html
index 6ce9a3c3..ded7b326 100644
--- a/_includes/sections/dns.html
+++ b/_includes/sections/dns.html
@@ -33,10 +33,278 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
NoTrack - A network-wide DNS server which blocks Tracking sites. Currently works in Debian and Ubuntu.
Namecoin - A decentralized DNS open source information registration and transfer system based on the Bitcoin cryptocurrency.
Pi-hole - A network-wide DNS server for the Raspberry Pi. Blocks advertising and tracking domains for all devices on your network.
- ICANN DNS resolvers with support for encrypted DNS
-
- - AdGuard DNS - A commercial, anycast DNS resolver with ad-blocking and support for DNS over HTTPS (DoH), DNS over TLS (DoT), and DNSCrypt. Warnings
- - BlahDNS - A small hobby ad-blocking DNS project with DoH, DoT, and DNSCrypt support. Servers located in Switzerland, Japan, and Germany. Warnings
- - PowerDNS - A best effort DoH service. Servers located in the Netherlands.
- - Quad9 DNS - A non-profit, anycast DNS provider founded by IBM, PCH, and Global Cyber Alliance. Provides malicious domain filtering and supports DoH, DoT, and DNSCrypt. Warnings
+
+ Encrypted ICANN DNS Providers
+
+
+ Note: Using an encrypted DNS resolver will not make you anonymous, nor hide your internet traffic from your Internet Service Provider. But it will prevent DNS hijacking, and make your DNS requests harder for third parties to eavesdrop on and tamper with. If you are currently using Google's DNS resolver, you should pick an alternative here.
+
+
+
+
+
+
+ ICANN DNS Provider |
+ Server Locations |
+ Privacy Policy |
+ Type |
+ Logging |
+ Protocols |
+ DNSSEC |
+ QNAME Minimization |
+ Filtering |
+ Source Code |
+
+
+
+
+
+ AdGuard
+ |
+ Anycast (based in Cyprus) |
+
+
+
+
+ |
+ Commercial |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Ads, trackers, malicious domains |
+
+
+
+
+ |
+
+
+
+
+ BlahDNS
+ |
+ Switzerland, Japan, Germany |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Ads, trackers, malicious domains |
+
+
+
+
+ |
+
+
+
+
+ Cloudflare
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Commercial |
+ Some |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ No |
+
+
+
+
+ |
+
+
+
+
+ CZ.NIC
+ |
+ Czech Republic |
+
+
+
+
+ |
+ Association |
+ No |
+ DoH, DoT |
+ Yes |
+ Yes |
+ ? |
+ ? |
+
+
+
+
+ dnswarden
+ |
+ Germany |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on server choice |
+ ? |
+
+
+
+
+ Foundation for Applied Privacy
+ |
+ Austria |
+
+
+
+
+ |
+ Non-Profit |
+ Some |
+ DoH, DoT |
+ Yes |
+ Yes |
+ No |
+ ? |
+
+
+
+
+ nextdns
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Commercial |
+ Based on user choice |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on user choice |
+ ? |
+
+
+
+
+ PowerDNS
+ |
+ The Netherlands |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH |
+ Yes |
+ No |
+ No |
+
+
+
+
+ |
+
+
+
+
+ Quad9
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Non-Profit |
+ Some |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Malicious domains |
+ ? |
+
+
+
+
+ SecureDNS
+ |
+ The Netherlands |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on server choice |
+ ? |
+
+
+
+
+ UncensoredDNS
+ |
+ Anycast (based in Denmark) |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoT |
+ Yes |
+ No |
+ No |
+ ? |
+
+
+
+
+
Terms
+
+
+ - DNS-over-TLS (DoT) - A security protocol for encrypted DNS on a dedicated port 853.
+ - DNS-over-HTTPS (DoH) - Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443.
+ - DNSCrypt - An older yet robust method of encrypting DNS.
+
+
+
Worth Mentioning and Additional Information
+
+
+ - Firefox comes with built-in DoH support with Cloudflare set as the default resolver, but can be configured to use any DoH resolver. Currently Mozilla is conducting studies before enabling DoH by default for all US-based Firefox users.
+ - Android 9 comes with a DoT client by default.
+ -
+ DNSCloak - An open-source DNSCrypt and DoH client for iOS by
the Center for the Cultivation of Technology gemeinnuetzige GmbH.
+
+ -
+ Stubby - An open-source application for Linux, macOS, and Windows that acts as a local DNS Privacy stub resolver using DoT.
+
+ - QNAME Minimization and Your Privacy by the Internet Systems Consortium (ISC)
+ - DNSSEC and BIND 9 by the ISC
+
+
\ No newline at end of file
diff --git a/source_code.md b/source_code.md
index 7ddd358a..b91f9331 100644
--- a/source_code.md
+++ b/source_code.md
@@ -258,21 +258,40 @@ Backend: closed-source
GNU Social: https://gnu.io/source/
## Domain Name System (DNS)
- Njalla: Non-free/Proprietary Software
- DNSCrypt: https://github.com/dnscrypt
+Njalla: Non-free/Proprietary Software
+
+DNSCrypt: https://github.com/dnscrypt
+
DNSCrypt-proxy: https://github.com/jedisct1/dnscrypt-proxy/
- OpenNic: https://github.com/opennic/ (mostly)
+OpenNic: https://github.com/opennic/ (mostly)
+
Webpage: https://github.com/opennic/opennic-web
- Worth Mentioning
+### Worth Mentioning
- NoTrack: https://github.com/quidsup/notrack
+- NoTrack: https://github.com/quidsup/notrack
- Namecoin: https://github.com/namecoin
+- Namecoin: https://github.com/namecoin
- Pi-hole: https://github.com/pi-hole
+- Pi-hole: https://github.com/pi-hole
+
+## Encrypted ICANN DNS Providers
+
+AdGuard DNS: https://github.com/AdguardTeam/AdGuardDNS/
+
+BlahDNS: https://github.com/ookangzheng/blahdns/
+
+CloudFlare DNS: https://github.com/cloudflare/dns
+
+PowerDNS: https://github.com/PowerDNS/pdns
+
+### Worth Mentioning and Additional Information
+
+- DNSCloak: https://github.com/s-s/dnscloak
+
+- Stubby: https://github.com/getdnsapi/stubby
## Digital Notebook
Joplin: https://github.com/laurent22/joplin
|