privacyguides/privacytools.io
Archived
1
0
Fork 0
Code Issues 304 Pull Requests 47 Activity

Bring the fork up to date

Browse Source
This commit is contained in:
Alberto 2019-09-07 02:21:06 +02:00 committed by GitHub
commit db436945fc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
13 changed files with 273 additions and 89 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/CONTRIBUTING.md vendored
View File

@ -32,8 +32,7 @@ Note: This criteria applies to all of privacytools.io
- supports DoH or DoT (We love DNSCrypt, but there is already https://github.com/DNSCrypt/dnscrypt-resolvers which is directly supported by dnscrypt-proxy, so we don't consider useful to list providers only supporting it). - supports DoH or DoT (We love DNSCrypt, but there is already https://github.com/DNSCrypt/dnscrypt-resolvers which is directly supported by dnscrypt-proxy, so we don't consider useful to list providers only supporting it).
- supports DNSSEC (https://dnssec.vs.uni-due.de/ can test your current DNS provider). - supports DNSSEC (https://dnssec.vs.uni-due.de/ can test your current DNS provider).
- doesn't log IP addresses during normal operation (If your suggestion logs, please compare its privacy policy with other servers on our table that keep logs). - doesn't log IP addresses during normal operation (If your suggestion logs, please compare its privacy policy with other servers on our table that keep logs).
- preferably supports QNAME minimization (if you have access to the dig command, `dig +short txt qnamemintest.internet.nl`) - preferably supports QNAME minimization (if you have access to the dig command, `dig +short txt qnamemintest.internet.nl` or `Resolve-DnsName -Type TXT -Name qnamemintest.internet.nl` if you are on Windows 10)
### VPN ### VPN
- Prioritize Products by privacy respecting nationality. - Prioritize Products by privacy respecting nationality.

2
.github/ISSUE_TEMPLATE/7_DNS_provider.md vendored
View File

@ -33,4 +33,4 @@ labels: 🌐 website issue, 🗄️ DNS
#### Desired features #### Desired features
* [ ] supports QNAME minimization <!-- if you have access to the dig command, `dig +short txt qnamemintest.internet.nl` --> * [ ] supports QNAME minimization <!-- if you have access to the dig command run `dig +short txt qnamemintest.internet.nl` or `Resolve-DnsName -Type TXT -Name qnamemintest.internet.nl` if you are on Windows 10 -->

197
_includes/sections/dns.html
View File

@ -1,30 +1,37 @@
<h1 id="dns" class="anchor"><a href="#dns"><i class="fas fa-link anchor-icon"></i></a> Domain Name System (DNS)</h1> <h1 id="dns" class="anchor"><a href="#dns"><i class="fas fa-link anchor-icon"></i></a> Domain Name System (DNS)</h1>
{% include cardv2.html {%
title="OpenNIC - Service" include cardv2.html
image="/assets/img/tools/OpenNIC.png" title="OpenNIC - Service"
description="OpenNIC is an alternate network information center/alternative DNS root which lists itself as an alternative to ICANN and its registries. Like all alternative root DNS systems, OpenNIC-hosted domains are unreachable to the vast majority of the Internet." image="/assets/img/tools/OpenNIC.png"
website="https://www.opennic.org/" description="OpenNIC is an alternate network information center/alternative DNS root which lists itself as an alternative to ICANN and its registries. Like all alternative root DNS systems, OpenNIC-hosted domains are unreachable to the vast majority of the Internet."
forum="https://forum.privacytools.io/t/discussion-opennic/338" website="https://www.opennic.org/"
github="https://github.com/OpenNIC" forum="https://forum.privacytools.io/t/discussion-opennic/338"
github="https://github.com/OpenNIC"
%} %}
{% include cardv2.html {%
title="Njalla - Domain Registration" include cardv2.html
image="/assets/img/provider/Njalla.png" title="Njalla - Domain Registration"
description="Njalla only needs your email or jabber address in order to register a domain name for you. Created by people from The Pirate Bay and IPredator VPN. Accepted Payments: Bitcoin, Litecoin, Monero, DASH, Bitcoin Cash and PayPal. A privacy-aware domain registration service." image="/assets/img/provider/Njalla.png"
website="https://njal.la/" description="Njalla only needs your email or XMPP address in order to register a domain name for you. Created by people from The Pirate Bay and IPredator VPN. Accepted Payments: Bitcoin, Litecoin, Monero, DASH, Bitcoin Cash and PayPal. A privacy-aware domain registration service."
tor="http://njalladnspotetti.onion" website="https://njal.la/"
forum="https://forum.privacytools.io/t/discussion-njalla/339" tor="http://njalladnspotetti.onion"
forum="https://forum.privacytools.io/t/discussion-njalla/339"
%} %}
{% include cardv2.html {%
title="DNSCrypt - Tool" include cardv2.html
image="/assets/img/tools/DNSCrypt.png" title="DNSCrypt-Proxy - Tool"
description="A protocol for securing communications between a client and a DNS resolver. The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography and is very similar to DNSCurve, but focuses on securing communications between a client and its first-level resolver." image="/assets/img/tools/DNSCrypt-Proxy.png"
website="https://dnscrypt.info/" description="DNSCrypt-Proxy is a command-line DNS proxy with support for the encrypted DNS protocols, DNS over HTTPS and DNSCrypt. Can cache results to improve speed, and allows filtering, forwarding, and cloaking."
forum="https://forum.privacytools.io/t/discussion-dnscrypt/340" website="https://github.com/jedisct1/dnscrypt-proxy/"
github="https://github.com/jedisct1/dnscrypt-proxy" forum="https://forum.privacytools.io/t/discussion-dnscrypt-proxy/1498"
github="https://github.com/jedisct1/dnscrypt-proxy/"
linux=""
mac=""
android=""
ios=""
%} %}
<h1 id="icanndns" class="anchor"><a href="#icanndns"><i class="fas fa-link anchor-icon"></i></a> Encrypted ICANN DNS Providers</h1> <h1 id="icanndns" class="anchor"><a href="#icanndns"><i class="fas fa-link anchor-icon"></i></a> Encrypted ICANN DNS Providers</h1>
@ -47,6 +54,7 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<th data-sortable="true">QNAME Minimization</th> <th data-sortable="true">QNAME Minimization</th>
<th data-sortable="true">Filtering</th> <th data-sortable="true">Filtering</th>
<th data-sortable="true">Source Code</th> <th data-sortable="true">Source Code</th>
<th data-sortable="true">Hosting Provider</th>
</tr> </tr>
</thead> </thead>
<tbody> <tbody>
@ -70,12 +78,24 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>DoH, DoT, DNSCrypt</td> <td>DoH, DoT, DNSCrypt</td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Ads, trackers, malicious domains</td> <td>
<span class="no-text-wrap">
Ads, trackers,
</span>
<span class="no-text-wrap">
malicious domains
</span>
</td>
<td> <td>
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://github.com/AdguardTeam/AdGuardDNS/" href="https://github.com/AdguardTeam/AdGuardDNS/"> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://github.com/AdguardTeam/AdGuardDNS/" href="https://github.com/AdguardTeam/AdGuardDNS/">
<img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"> <img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35">
</a> </a>
</td> </td>
<td>
<span class="no-text-wrap">
<a href="https://flops.ru/en/about.html">Serveroid, LLC</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -114,12 +134,31 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
</td> </td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Ads, trackers, malicious domains <span class="badge badge-warning" data-toggle="tooltip" data-original-title="And some wildcard, IDN, and non-ASCII domains."><a href="https://github.com/ookangzheng/blahdns#default-blocked-wildcard-domain"><i class="fas fa-exclamation-triangle"></i></a></span></td> <td>
<span class="no-text-wrap">
Ads, trackers,
</span>
<span class="no-text-wrap">
malicious domains
<span class="badge badge-warning" data-toggle="tooltip" data-original-title="And some wildcard, IDN, and non-ASCII domains."><a href="https://github.com/ookangzheng/blahdns#default-blocked-wildcard-domain"><i class="fas fa-exclamation-triangle"></i></a></span>
</span>
</td>
<td> <td>
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://github.com/ookangzheng/blahdns/" href="https://github.com/ookangzheng/blahdns/"> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://github.com/ookangzheng/blahdns/" href="https://github.com/ookangzheng/blahdns/">
<img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"> <img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35">
</a> </a>
</td> </td>
<td>
<span class="no-text-wrap">
<a href="https://www.choopa.com/">Choopa, LLC</a>,
</span>
<span class="no-text-wrap">
<a href="https://www.datacenterlight.ch/">Data Center Light</a>,
</span>
<span class="no-text-wrap">
<a href="https://www.hetzner.com/">Hetzner Online GmbH</a>,
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -143,11 +182,8 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>No</td> <td>No</td>
<td> <td>?</td>
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://github.com/cloudflare/dns" href="https://github.com/cloudflare/dns"> <td>Self</td>
<img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35">
</a>
</td>
</tr> </tr>
<tr> <tr>
@ -172,6 +208,7 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>Yes</td> <td>Yes</td>
<td data-value="No">?</td> <td data-value="No">?</td>
<td>?</td> <td>?</td>
<td>Self</td>
</tr> </tr>
<tr> <tr>
@ -202,8 +239,17 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
</td> </td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Based on server choice</td> <td>
<span class="no-text-wrap">
Based on server choice
</span>
</td>
<td>?</td> <td>?</td>
<td>
<span class="no-text-wrap">
<a href="https://www.hetzner.com/">Hetzner Online GmbH</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -235,11 +281,16 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>Yes</td> <td>Yes</td>
<td>No</td> <td>No</td>
<td>?</td> <td>?</td>
<td>
<span class="no-text-wrap">
<a href="https://www.ipax.at/">IPAX OG</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
<td data-value="nextdns"> <td data-value="nextdns">
<a href="https://www.nextdns.io/">nextdns</a> <a href="https://www.nextdns.io/">NextDNS</a>
</td> </td>
<td>Anycast (based in <td>Anycast (based in
<span class="no-text-wrap"> <span class="no-text-wrap">
@ -253,12 +304,19 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
</a> </a>
</td> </td>
<td>Commercial</td> <td>Commercial</td>
<td><a data-toggle="tooltip" data-placement="bottom" data-original-title='"Some of the features require some sort of data retention. In that case, we give our users the choice to granularly or completely disable those features (and associated data retention), and we follow up immediately on that promise"' href="https://www.nextdns.io/privacy">Based on user choice</a></td> <td>
<a data-toggle="tooltip" data-placement="bottom" data-original-title='"Some of the features require some sort of data retention. In that case, we give our users the choice to granularly or completely disable those features (and associated data retention), and we follow up immediately on that promise"' href="https://www.nextdns.io/privacy">Based on user choice</a>
</td>
<td>DoH, DoT, DNSCrypt</td> <td>DoH, DoT, DNSCrypt</td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Based on user choice</td> <td>
<span class="no-text-wrap">
Based on server choice
</span>
</td>
<td>?</td> <td>?</td>
<td>Self</td>
</tr> </tr>
<tr> <tr>
@ -294,12 +352,21 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>DoT</td> <td>DoT</td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Based on server choice</td> <td>
<span class="no-text-wrap">
Based on server choice
</span>
</td>
<td> <td>
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://git.nixnet.xyz/NixNet/dns" href="https://git.nixnet.xyz/NixNet/dns"> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://git.nixnet.xyz/NixNet/dns" href="https://git.nixnet.xyz/NixNet/dns">
<img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"> <img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35">
</a> </a>
</td> </td>
<td>
<span class="no-text-wrap">
<a href="https://frantech.ca/">FranTech Solutions</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -328,6 +395,11 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"> <img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35">
</a> </a>
</td> </td>
<td>
<span class="no-text-wrap">
<a href="https://www.transip.nl/">TransIP B.V. Admin</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -350,8 +422,18 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>DoH, DoT, DNSCrypt</td> <td>DoH, DoT, DNSCrypt</td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Malicious domains</td> <td>
<span class="no-text-wrap">
Malicious domains
</span>
</td>
<td>?</td> <td>?</td>
<td>
Self,
<span class="no-text-wrap">
<a href="https://www.pch.net/">Packet Clearing House</a>
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -374,8 +456,17 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>DoH, DoT, DNSCrypt</td> <td>DoH, DoT, DNSCrypt</td>
<td>Yes</td> <td>Yes</td>
<td>Yes</td> <td>Yes</td>
<td>Based on server choice</td> <td>
<span class="no-text-wrap">
Based on server choice
</span>
</td>
<td>?</td> <td>?</td>
<td>
<span class="no-text-wrap">
<a href="https://www.digitalocean.com/">DigitalOcean, Inc.</a>,
</span>
</td>
</tr> </tr>
<tr> <tr>
@ -385,7 +476,17 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>Anycast (based in <td>Anycast (based in
<span class="no-text-wrap"> <span class="no-text-wrap">
<span class="flag-icon flag-icon-dk"></span> <span class="flag-icon flag-icon-dk"></span>
Denmark) Denmark),
</span>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-dk"></span>
Denmark,
</span>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-us"></span>
US
</span> </span>
</td> </td>
<td> <td>
@ -400,6 +501,12 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<td>No</td> <td>No</td>
<td>No</td> <td>No</td>
<td>?</td> <td>?</td>
<td>
Self,
<span class="no-text-wrap">
<a href="https://www.teliacompany.com">Telia Company AB</a>
</span>
</td>
</tr> </tr>
</tbody> </tbody>
</table> </table>
@ -408,7 +515,11 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<h4>Terms</h4> <h4>Terms</h4>
<ul> <ul>
<li>DNS-over-TLS (DoT) - A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls.</li> <li>DNS-over-TLS (DoT) - A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls. DoT has two modes:</li>
<ul>
<li>Oppurtunistic mode: the client attempts to form a DNS-over-TLS connection to the server on port 853 without performing certificate validation. If it fails, it will use unencrypted DNS. <span class="badge badge-warning" data-toggle="tooltip" data-original-title="In other words automatic mode leaves your DNS traffic vulnerable to SSL strip and MITM attacks"><i class="fas fa-exclamation-triangle"></i></span></li>
<li>Strict mode: the client connects to a specific hostname and performs certificate validation for it. If it fails, no DNS queries are made until it succeeds.</li>
</ul>
<li>DNS-over-HTTPS (DoH) - Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443. <span class="badge badge-warning" data-toggle="tooltip" data-original-title="DoH contains metadata such as user-agent (which may include system information) that is sent to the DNS server."><a href="https://tools.ietf.org/html/rfc8484#section-8.2"><i class="fas fa-exclamation-triangle"></i></a></span></li> <li>DNS-over-HTTPS (DoH) - Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443. <span class="badge badge-warning" data-toggle="tooltip" data-original-title="DoH contains metadata such as user-agent (which may include system information) that is sent to the DNS server."><a href="https://tools.ietf.org/html/rfc8484#section-8.2"><i class="fas fa-exclamation-triangle"></i></a></span></li>
<li>DNSCrypt - An older yet robust method of encrypting DNS.</li> <li>DNSCrypt - An older yet robust method of encrypting DNS.</li>
</ul> </ul>
@ -423,10 +534,9 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<li>If using Firefox's trusted recursive resolver (TRR), navigate to <code>about:networking#dns</code>. If the TRR column says "true" for some fields, you are using DoH. <span class="badge badge-warning" data-toggle="tooltip" data-placement="bottom" data-original-title='Some fields will say "false" depending on the the value of network.trr.mode in about:config'><a href="https://wiki.mozilla.org/Trusted_Recursive_Resolver"><i class="fas fa-exclamation-triangle"></i></a></span></li> <li>If using Firefox's trusted recursive resolver (TRR), navigate to <code>about:networking#dns</code>. If the TRR column says "true" for some fields, you are using DoH. <span class="badge badge-warning" data-toggle="tooltip" data-placement="bottom" data-original-title='Some fields will say "false" depending on the the value of network.trr.mode in about:config'><a href="https://wiki.mozilla.org/Trusted_Recursive_Resolver"><i class="fas fa-exclamation-triangle"></i></a></span></li>
</ul> </ul>
</li> </li>
<li>dnscrypt-proxy - Check <a href="https://github.com/jedisct1/dnscrypt-proxy/wiki/Checking">dnscrypt-proxy's wiki on how to verify that your DNS is encrypted</a>. <li>dnscrypt-proxy - Check <a href="https://github.com/jedisct1/dnscrypt-proxy/wiki/Checking">dnscrypt-proxy's wiki on how to verify that your DNS is encrypted</a>.</li>
</li>
<li>DNSSEC - Check <a href="https://dnssec.vs.uni-due.de/">DNSSEC Resolver Test by Matthäus Wander</a>.</li> <li>DNSSEC - Check <a href="https://dnssec.vs.uni-due.de/">DNSSEC Resolver Test by Matthäus Wander</a>.</li>
<li>QNAME Minimization - Run <code><a href="https://en.wikipedia.org/wiki/Dig_(command)">dig</a> +short txt qnamemintest.internet.nl</code> from the command-line (taken from <a href="https://nlnetlabs.nl/downloads/presentations/unbound_qnamemin_oarc24.pdf">this NLnet Labs presentation</a>). You should see this display: <code>"HOORAY - QNAME minimisation is enabled on your resolver :)!"</code></li> <li>QNAME Minimization - Run <code>dig +short txt qnamemintest.internet.nl</code> from the command-line (taken from <a href="https://nlnetlabs.nl/downloads/presentations/unbound_qnamemin_oarc24.pdf">this NLnet Labs presentation</a>). If you are on Windows 10, run <code>Resolve-DnsName -Type TXT -Name qnamemintest.internet.nl</code> from the PowerShell. You should see this display: <code>"HOORAY - QNAME minimisation is enabled on your resolver :)!"</code></li>
</ul> </ul>
<h3>Worth Mentioning and Additional Information</h3> <h3>Worth Mentioning and Additional Information</h3>
@ -444,6 +554,9 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<li><strong>Encrypted DNS clients for mobile:</strong> <li><strong>Encrypted DNS clients for mobile:</strong>
<ul> <ul>
<li><em>Android 9</em> comes with a DoT client by <a href="https://support.google.com/android/answer/9089903">default</a>. <span class="badge badge-warning" data-toggle="tooltip" data-original-title="...but with some caveats"><a href="https://www.quad9.net/private-dns-quad9-android9/"><i class="fas fa-exclamation-triangle"></i></a></span></li> <li><em>Android 9</em> comes with a DoT client by <a href="https://support.google.com/android/answer/9089903">default</a>. <span class="badge badge-warning" data-toggle="tooltip" data-original-title="...but with some caveats"><a href="https://www.quad9.net/private-dns-quad9-android9/"><i class="fas fa-exclamation-triangle"></i></a></span></li>
<ul>
<li>We recommend selecting <em>Private DNS provider hostname</em> and entering the DoT address from documentation of your DoT provider to enable strict mode (see Terms above). <span class="badge badge-warning" data-toggle="tooltip" data-original-title="If you are on a network blocking access to port 853, Android will error about the network not having internet connectivity."><i class="fas fa-exclamation-triangle"></i></span></li>
</ul>
<li><em><a href="https://apps.apple.com/app/id1452162351">DNSCloak</a></em> - An <a href="https://github.com/s-s/dnscloak">open-source</a> DNSCrypt and DoH client for iOS by <td><a data-toggle="tooltip" data-placement="bottom" data-original-title='"A charitable non-profit host organization for international Free Software projects."' href="https://techcultivation.org/">the Center for the Cultivation of Technology gemeinnuetzige GmbH</a>.</li> <li><em><a href="https://apps.apple.com/app/id1452162351">DNSCloak</a></em> - An <a href="https://github.com/s-s/dnscloak">open-source</a> DNSCrypt and DoH client for iOS by <td><a data-toggle="tooltip" data-placement="bottom" data-original-title='"A charitable non-profit host organization for international Free Software projects."' href="https://techcultivation.org/">the Center for the Cultivation of Technology gemeinnuetzige GmbH</a>.</li>
<li><em><a href="https://git.frostnerd.com/PublicAndroidApps/smokescreen/blob/master/README.md">Nebulo</a></em> - An open-source application for Android supporting DoH and DoT. It also supports caching DNS responses and locally logging DNS queries.</li> <li><em><a href="https://git.frostnerd.com/PublicAndroidApps/smokescreen/blob/master/README.md">Nebulo</a></em> - An open-source application for Android supporting DoH and DoT. It also supports caching DNS responses and locally logging DNS queries.</li>
</ul> </ul>
@ -452,6 +565,10 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
<ul> <ul>
<li><em><a href="https://namecoin.info/">Namecoin</a></em> - A decentralized DNS open-source information registration and transfer system based on the Bitcoin cryptocurrency.</li> <li><em><a href="https://namecoin.info/">Namecoin</a></em> - A decentralized DNS open-source information registration and transfer system based on the Bitcoin cryptocurrency.</li>
<li><em><a href="https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby">Stubby</a></em> - An open-source application for Linux, macOS, and Windows that acts as a local DNS Privacy stub resolver using DoT.</li> <li><em><a href="https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby">Stubby</a></em> - An open-source application for Linux, macOS, and Windows that acts as a local DNS Privacy stub resolver using DoT.</li>
<li><em><a href="https://nlnetlabs.nl/projects/unbound/about/">Unbound</a></em> - a validating, recursive, caching DNS resolver. It can also be ran network-wide and has supported DNS-over-TLS since version 1.7.3.</li>
<ul>
<li>See also <a href="https://www.ctrl.blog/entry/unbound-tls-forwarding.html">Actually secure DNS over TLS in Unbound on ctrl.blog</a>.</li>
</ul>
</ul> </ul>
</li> </li>
<li><strong>Network wide DNS servers:</strong> <li><strong>Network wide DNS servers:</strong>

66
_includes/sections/email-providers.html
View File

@ -30,7 +30,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://disroot.org" href="https://disroot.org"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://disroot.org" href="https://disroot.org"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2015">2015</td> <td data-value="2015">2015</td>
<td><span class="flag-icon flag-icon-nl"></span> Netherlands</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-nl"></span> Netherlands
</span>
</td>
<td data-value="1000">1 GB</td> <td data-value="1000">1 GB</td>
<td data-value="0"><span class="label label-warning">Free</span></td> <td data-value="0"><span class="label label-warning">Free</span></td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -46,7 +50,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://kolabnow.com" href="https://kolabnow.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://kolabnow.com" href="https://kolabnow.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2010">2010</td> <td data-value="2010">2010</td>
<td><span class="flag-icon flag-icon-ch"></span> Switzerland</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-ch"></span> Switzerland
</span>
</td>
<td data-value="2048">2 GB</td> <td data-value="2048">2 GB</td>
<td data-value="6000">$ 60</td> <td data-value="6000">$ 60</td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -63,7 +71,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://mailbox.org" href="https://mailbox.org"><img alt="WWW" src="/assets/img/layout/www.png" width="35 "height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://mailbox.org" href="https://mailbox.org"><img alt="WWW" src="/assets/img/layout/www.png" width="35 "height="35"></a>
</td> </td>
<td data-value="2014">2014</td> <td data-value="2014">2014</td>
<td><span class="flag-icon flag-icon-de"></span> Germany</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-de"></span> Germany
</span>
</td>
<td data-value="2000">2 GB</td> <td data-value="2000">2 GB</td>
<td data-value="1444">12 €</td> <td data-value="1444">12 €</td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -79,7 +91,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://mailfence.com" href="https://mailfence.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://mailfence.com" href="https://mailfence.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2013">2013</td> <td data-value="2013">2013</td>
<td><span class="flag-icon flag-icon-be"></span> Belgium</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-be"></span> Belgium
</span>
</td>
<td data-value="500">500 MB</td> <td data-value="500">500 MB</td>
<td data-value="0"><span class="label label-warning">Free</span></td> <td data-value="0"><span class="label label-warning">Free</span></td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -95,7 +111,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.neomailbox.com" href="https://www.neomailbox.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.neomailbox.com" href="https://www.neomailbox.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2003">2003</td> <td data-value="2003">2003</td>
<td><span class="flag-icon flag-icon-ch"></span> Switzerland</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-ch"></span> Switzerland
</span>
</td>
<td data-value="1000">1 GB</td> <td data-value="1000">1 GB</td>
<td data-value="4995">$ 49.95</td> <td data-value="4995">$ 49.95</td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -111,7 +131,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://posteo.de" href="https://posteo.de"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://posteo.de" href="https://posteo.de"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2009">2009</td> <td data-value="2009">2009</td>
<td><span class="flag-icon flag-icon-de"></span> Germany</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-de"></span> Germany
</span>
</td>
<td data-value="2000">2 GB</td> <td data-value="2000">2 GB</td>
<td data-value="1444">12 €</td> <td data-value="1444">12 €</td>
<td data-value="0"><span class="label label-primary">No</span></td> <td data-value="0"><span class="label label-primary">No</span></td>
@ -128,7 +152,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://protonirockerxow.onion. Requires specific software to access: torproject.org" href="https://protonirockerxow.onion"><img alt="Tor" src="/assets/img/layout/tor.png" width="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://protonirockerxow.onion. Requires specific software to access: torproject.org" href="https://protonirockerxow.onion"><img alt="Tor" src="/assets/img/layout/tor.png" width="35"></a>
</td> </td>
<td data-value="2013">2013</td> <td data-value="2013">2013</td>
<td><span class="flag-icon flag-icon-ch"></span> Switzerland</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-ch"></span> Switzerland
</span>
</td>
<td data-value="500">500 MB</td> <td data-value="500">500 MB</td>
<td data-value="0"><span class="label label-warning">Free</span></td> <td data-value="0"><span class="label label-warning">Free</span></td>
<td data-value="1"><span class="label label-success">Accepted</span></td> <td data-value="1"><span class="label label-success">Accepted</span></td>
@ -145,7 +173,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://runbox.com" href="https://runbox.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://runbox.com" href="https://runbox.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="1999">1999</td> <td data-value="1999">1999</td>
<td><span class="flag-icon flag-icon-no"></span> Norway</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-no"></span> Norway
</span>
</td>
<td data-value="1000">1 GB</td> <td data-value="1000">1 GB</td>
<td data-value="1995">$ 19.95</td> <td data-value="1995">$ 19.95</td>
<td data-value="1"><span class="label label-primary">Accepted</span></td> <td data-value="1"><span class="label label-primary">Accepted</span></td>
@ -161,7 +193,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://soverin.net/" href="https://soverin.net/"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://soverin.net/" href="https://soverin.net/"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2015">2015</td> <td data-value="2015">2015</td>
<td><span class="flag-icon flag-icon-nl"></span> Netherlands</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-nl"></span> Netherlands
</span>
</td>
<td data-value="25000">25 GB</td> <td data-value="25000">25 GB</td>
<td data-value="3489">29 €</td> <td data-value="3489">29 €</td>
<td data-value="0"><span class="label label-success">No</span></td> <td data-value="0"><span class="label label-success">No</span></td>
@ -177,7 +213,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.startmail.com" href="https://www.startmail.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.startmail.com" href="https://www.startmail.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2014">2014</td> <td data-value="2014">2014</td>
<td><span class="flag-icon flag-icon-nl"></span> Netherlands</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-nl"></span> Netherlands
</span>
</td>
<td data-value="10000">10 GB</td> <td data-value="10000">10 GB</td>
<td data-value="5995">$ 59.95</td> <td data-value="5995">$ 59.95</td>
<td data-value="0"><span class="label label-success">Accepted</span></td> <td data-value="0"><span class="label label-success">Accepted</span></td>
@ -193,7 +233,11 @@
<a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.tutanota.com" href="https://www.tutanota.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a> <a data-toggle="tooltip" data-placement="bottom" data-original-title="https://www.tutanota.com" href="https://www.tutanota.com"><img alt="WWW" src="/assets/img/layout/www.png" width="35" height="35"></a>
</td> </td>
<td data-value="2011">2011</td> <td data-value="2011">2011</td>
<td><span class="flag-icon flag-icon-de"></span> Germany</td> <td>
<span class="no-text-wrap">
<span class="flag-icon flag-icon-de"></span> Germany
</span>
</td>
<td data-value="1000">1 GB</td> <td data-value="1000">1 GB</td>
<td data-value="0"><span class="label label-warning">Free</span></td> <td data-value="0"><span class="label label-warning">Free</span></td>
<td data-value="0"><span class="label label-primary">No</span></td> <td data-value="0"><span class="label label-primary">No</span></td>

21
_includes/sections/productivity-tools.html
View File

@ -31,6 +31,27 @@
</div> </div>
<h1 id="metadata-removal-tools" class="anchor">
<a href="#metadata-removal-tools"
><i class="fas fa-link anchor-icon"></i>
</a> Metadata Removal Tools
</h1>
<div class="row mb-2">
{%
include cardv2.html
title="MAT2"
image="/assets/img/tools/MAT2.png"
description="<strong>MAT2</strong> is free software, which allows the removal of metadata of image, audio, torrent, and document file types. It provides both a command line tool and a graphical user interface via an extension for Nautilus, the default file manager of GNOME."
website="https://0xacab.org/jvoisin/mat2"
forum="https://forum.privacytools.io/t/discussion-mat/1559"
gitlab="https://0xacab.org/jvoisin/mat2"
linux=""
mac=""
windows=""
%}
</div>
<h3>Worth Mentioning</h3> <h3>Worth Mentioning</h3>
<ul> <ul>

57
_includes/sections/teamchat.html
View File

@ -4,35 +4,38 @@
<strong>If your project or organization currently uses a platform like <a href="https://web.archive.org/web/20171029114027/https://feedback.discordapp.com/forums/326712-discord-dream-land/suggestions/17094256-implement-whispersystems-encryption-for-voice-and">Discord</a> or <a href="https://drewdevault.com/2015/11/01/Please-stop-using-slack.html">Slack</a> you should pick an alternative here.</strong> <strong>If your project or organization currently uses a platform like <a href="https://web.archive.org/web/20171029114027/https://feedback.discordapp.com/forums/326712-discord-dream-land/suggestions/17094256-implement-whispersystems-encryption-for-voice-and">Discord</a> or <a href="https://drewdevault.com/2015/11/01/Please-stop-using-slack.html">Slack</a> you should pick an alternative here.</strong>
</div> </div>
{% include cardv2.html {%
title="Rocket.chat" include cardv2.html
image="/assets/img/tools/rocket.chat.png" title="Rocket.chat"
description="Rocket.chat is an self-hostable open source platform for team communication. It has optional federation and experimental E2EE." image="/assets/img/tools/rocket.chat.png"
labels="warning:<a href=//rocket.chat/docs/user-guides/end-to-end-encryption/>Experimental</a>:Regarding E2EE their documentation states 'This feature is currently in alpha. It's also not yet supported on mobile'. There is no forward secrecy so compromised decryption password would leak all messages. The federation was also added afterwards potentially causing room for mistakes." description="Rocket.chat is an self-hostable open source platform for team communication. It has optional federation and experimental E2EE."
website="https://rocket.chat/" labels="warning:<a href=//rocket.chat/docs/user-guides/end-to-end-encryption/>Experimental</a>:Regarding E2EE their documentation states 'This feature is currently in alpha. It's also not yet supported on mobile'. There is no forward secrecy so compromised decryption password would leak all messages. The federation was also added afterwards potentially causing room for mistakes."
forum="https://forum.privacytools.io/t/discussion-rocket-chat/1223" website="https://rocket.chat/"
github="https://github.com/rocketchat/" forum="https://forum.privacytools.io/t/discussion-rocket-chat/1223"
android="" github="https://github.com/rocketchat/"
ios="" android=""
mac="" ios=""
windows="" mac=""
linux="" windows=""
linux=""
%} %}
{% include cardv2.html {%
title="Keybase" include cardv2.html
image="/assets/img/tools/keybase.png" title="Keybase"
description='Keybase provides a hosted team chat with end-to-end encryption. It has also been <a href="https://keybase.io/docs-assets/blog/NCC_Group_Keybase_KB2018_Public_Report_2019-02-27_v1.3.pdf">indepedently audited (PDF)</a>.' image="/assets/img/tools/keybase.png"
labels="warning:<a href=//github.com/keybase/client/issues/6374>Warning</a>:The server side of Keybase runs on proprietary code and is centralized." description='Keybase provides a hosted team chat with end-to-end encryption. It has also been <a href="https://keybase.io/docs-assets/blog/NCC_Group_Keybase_KB2018_Public_Report_2019-02-27_v1.3.pdf">indepedently audited (PDF)</a>.'
website="https://keybase.io/" labels="warning:<a href=//github.com/keybase/client/issues/6374>Warning</a>:The server side of Keybase runs on proprietary code and is centralized."
forum="https://forum.privacytools.io/t/discussion-keybase/1224" website="https://keybase.io/"
github="https://github.com/Keybase" forum="https://forum.privacytools.io/t/discussion-keybase/1224"
android="" tor="http://keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion/"
ios="" github="https://github.com/Keybase"
mac="" android=""
windows="" ios=""
linux="" mac=""
web="" windows=""
linux=""
web=""
%} %}

BIN
assets/img/icons/bromite.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 4.9 KiB

BIN
assets/img/icons/duckduckgo.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 70 KiB

BIN
assets/img/icons/onionbrowser.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 63 KiB

BIN
assets/img/tools/DNSCrypt-Proxy.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 11 KiB

BIN
assets/img/tools/DNSCrypt.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 2.7 KiB

BIN
assets/img/tools/MAT2.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 3.9 KiB

16
source_code.md
View File

@ -275,15 +275,11 @@ Raddle: https://gitlab.com/postmill
## Domain Name System (DNS) ## Domain Name System (DNS)
OpenNic: https://github.com/opennic/
Njalla: Non-free/Proprietary Software Njalla: Non-free/Proprietary Software
DNSCrypt: https://github.com/dnscrypt DNSCrypt-Proxy: https://github.com/jedisct1/dnscrypt-proxy/
DNSCrypt-proxy: https://github.com/jedisct1/dnscrypt-proxy/
OpenNic: https://github.com/opennic/ (mostly)
Webpage: https://github.com/opennic/opennic-web
### Worth Mentioning ### Worth Mentioning
@ -313,9 +309,11 @@ PowerDNS: https://github.com/PowerDNS/pdns
#### Local DNS servers #### Local DNS servers
- Namecoin: https://github.com/namecoin
- Stubby: https://github.com/getdnsapi/stubby - Stubby: https://github.com/getdnsapi/stubby
- Namecoin: https://github.com/namecoin - Unbound: https://github.com/NLnetLabs/unbound
## Digital Notebook ## Digital Notebook
Joplin: https://github.com/laurent22/joplin Joplin: https://github.com/laurent22/joplin
@ -384,6 +382,8 @@ Backend: Closed Source
LibreOffice: https://gerrit.libreoffice.org/ LibreOffice: https://gerrit.libreoffice.org/
MAT2: https://0xacab.org/jvoisin/mat2
## PC Operating Systems ## PC Operating Systems
QubesOS: https://github.com/QubesOS QubesOS: https://github.com/QubesOS