diff --git a/_includes/sections/dns.html b/_includes/sections/dns.html index f0e4eb1b..fd7531ff 100644 --- a/_includes/sections/dns.html +++ b/_includes/sections/dns.html @@ -2,30 +2,8 @@ Encrypted DNS Resolvers -

Terms

- -

DNS-over-TLS (DoT)

-

- A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls. -

- -

DNS-over-HTTPS (DoH)

-

- Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443 and more difficult to block. {% include badge.html color="warning" text="Warning" tooltip="DoH contains metadata such as user-agent (which may include system information) that is sent to the DNS server." link="https://tools.ietf.org/html/rfc8484#section-8.2" icon="fas fa-exclamation-triangle" %} -

- -

DNSCrypt

-

- With an open specification, DNSCrypt is an older, yet robust method for encrypting DNS. -

- -

Anonymized DNSCrypt

-

- A lightweight protocol that hides the client IP address by using pre-configured relays to forward encrypted DNS data. This is a relatively new protocol created in 2019 currently only supported by dnscrypt-proxy and a limited number of relays. -

-
diff --git a/pages/providers/dns.html b/pages/providers/dns.html index 6c3ef45b..6adc8f01 100644 --- a/pages/providers/dns.html +++ b/pages/providers/dns.html @@ -90,3 +90,29 @@ breadcrumb: "DNS" ios="https://apps.apple.com/app/id1452162351" github="https://github.com/s-s/dnscloak" %} + +

+ + + Terms +

+ +

DNS-over-TLS (DoT)

+

+ A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls. +

+ +

DNS-over-HTTPS (DoH)

+

+ Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443 and more difficult to block. {% include badge.html color="warning" text="Warning" tooltip="DoH contains metadata such as user-agent (which may include system information) that is sent to the DNS server." link="https://tools.ietf.org/html/rfc8484#section-8.2" icon="fas fa-exclamation-triangle" %} +

+ +

DNSCrypt

+

+ With an open specification, DNSCrypt is an older, yet robust method for encrypting DNS. +

+ +

Anonymized DNSCrypt

+

+ A lightweight protocol that hides the client IP address by using pre-configured relays to forward encrypted DNS data. This is a relatively new protocol created in 2019 currently only supported by dnscrypt-proxy and a limited number of relays. +

\ No newline at end of file