🗄️ DNS provider suggestion | NixNet #1206

New Issue

2019-08-24T08:32:02Z

Mikaela commented

2019-08-24 08:32:02 +00:00

(Migrated from github.com)

Basic Information

Name: NixNet
Filtering: No
Privacy policy: https://nixnet.xyz/privacy/
Protocols: DoT (853)
Server/Location: Anycast, Luxembourg, New York, Las Vegas
Source: - (Unbound)
Type: Informal collective (part of Librehosters, see #816 )
Website: https://nixnet.xyz/dns/

Description

From what I understood they are smaller indepedent provider and thus good for decentralization. They also have servers in the US which our listing is currently missing.

I opened an issue about features I am unsure of: https://git.nixnet.xyz/NixNet/NixNet/issues/2 (including whether IP addresses get logged)

Required features:

supports DoH or DoT
supports DNSSEC
doesn't log IP addresses during normal operation

Desired features

supports QNAME minimization

## Basic Information **Name:** NixNet **Filtering:** No **Privacy policy:** https://nixnet.xyz/privacy/ **Protocols:** DoT (853) **Server/Location:** Anycast, Luxembourg, New York, Las Vegas **Source:** - (Unbound) **Type:** Informal collective (part of Librehosters, see #816 ) **Website:** https://nixnet.xyz/dns/ ## Description From what I understood they are smaller indepedent provider and thus good for decentralization. They also have servers in the US which our listing is currently missing. I opened an issue about features I am unsure of: https://git.nixnet.xyz/NixNet/NixNet/issues/2 (including whether IP addresses get logged) ### Required features:  * [x] supports DoH or DoT  * [x] supports DNSSEC  * [x] doesn't log IP addresses during normal operation  #### Desired features * [x] supports QNAME minimization

Mikaela commented

2019-08-24 08:36:37 +00:00

(Migrated from github.com)

They also recommend lelux.fi which leaves some details unclear to me, ~~but I get the picture that they don't support DNSSEC~~, so I am not opening an issue for now.

Edit:

The resolver does support IPv4 and IPv6 and checks DNSSEC. Uncensored results (aka no adblocking or such).

https://lelux.fi/resolver/

They also recommend [lelux.fi](https://lelux.fi/resolver/) which leaves some details unclear to me, ~~but I get the picture that [they don't support DNSSEC](https://wiki.lelux.fi/dns-over-tls/unbound/linux/#arch)~~, so I am not opening an issue for now. Edit: > *The resolver does support IPv4 and IPv6 and checks DNSSEC. Uncensored results (aka no adblocking or such).* * https://lelux.fi/resolver/

Perflyst commented

2019-08-24 08:57:41 +00:00

(Migrated from github.com)

poke @amolith

ProgressiveArchitect commented

2019-08-25 08:02:11 +00:00

(Migrated from github.com)

It seems silly to add another DNS server to an already packed list, especially when it doesn't support all the features that would make it fully privacy focused.

Amolith commented

2019-08-25 16:28:46 +00:00

(Migrated from github.com)

TODO

DNSSEC validation
Check QNAME minimization
Explain Unbound verbosity in privacy policy

I set these up a while ago and I couldn't remember what I had configured. As I was looking around, I found that all the features requested are enabled; Unbound does DNSSEC validation and QNAME minimisation by default. I've added a new header on the DNS page with a list of the features as well as mentioned the Unbound verbosity in the Privacy Policy

EDIT

The wording in my privacy policy was inaccurate; previously, it said "Unbound query logs are enabled" and now it says "Unbound debug logs are enabled". Verbosity is set to 1 by default and I didn't mess with that.

### TODO - [x] DNSSEC validation - [x] Check QNAME minimization - [x] Explain Unbound verbosity in privacy policy I set these up a while ago and I couldn't remember what I had configured. As I was looking around, I found that all the features requested are enabled; Unbound does DNSSEC validation and QNAME minimisation by default. I've added a new header on the [DNS page](https://nixnet.xyz/dns) with a list of the features as well as mentioned the Unbound verbosity in the [Privacy Policy](https://nixnet.xyz/privacy) ## EDIT The wording in my privacy policy was inaccurate; previously, it said "Unbound **query** logs are enabled" and now it says "Unbound **debug** logs are enabled". Verbosity is set to 1 by default and I didn't mess with that.

👍 2 ❤️ 1

Amolith commented

2019-09-16 00:55:44 +00:00

(Migrated from github.com)

Adblocked DoH is active and uncensored is in progress.
https://nixnet.xyz/dns/

Adblocked DoH is active and uncensored is in progress. https://nixnet.xyz/dns/

🚀 1

Mikaela commented

2019-09-16 10:57:59 +00:00

(Migrated from github.com)

Thanks for the update (and https://github.com/privacytoolsIO/privacytools.io/pull/1321).

Is Anycast DoH missing on purpose? I see that only Adblock anycast has DoH listed.

Thanks for the update (and https://github.com/privacytoolsIO/privacytools.io/pull/1321). Is Anycast DoH missing on purpose? I see that only Adblock anycast has DoH listed.

Amolith commented

2019-09-16 13:48:42 +00:00

(Migrated from github.com)

The first Anycast section is DNS without Adblock (uncensored) and that's what I'm working on implementing DoH with. You'll notice that the specific locations only list that as well and not uncensored.

👍 1

Amolith commented

2020-02-18 16:32:49 +00:00

(Migrated from github.com)

I'm in the process of moving all of my documentation to a new website; DNS information can be found here with relevant links to other sections. I have git set up for the backend so all the pages are plain MD files stored on Gitea

I'm in the process of moving all of my documentation to a new website; DNS information can be found [here](https://docs.nixnet.services/en/dns) with relevant links to other sections. I have git set up for the backend so all the pages are plain MD files stored on [Gitea](https://git.nixnet.xyz/NixNet/documentation)

Amolith commented

2020-03-03 02:10:26 +00:00

(Migrated from github.com)

Change of URL again (sorry!); I switched from Wiki.js to MediaWiki because the former relies to heavily on JS and this information needs to be accessible to anyone. Most information can be found here but the privacy policy is on a separate page. I'm going to set them all up with proper categories in the near future.

Change of URL again (sorry!); I switched from [Wiki.js](https://wiki.js.org/) to [MediaWiki](https://www.mediawiki.org/) because the former relies to heavily on JS and this information needs to be accessible to anyone. Most information can be found [here](https://docs.nixnet.services/DNS) but the privacy policy is on a [separate page](https://docs.nixnet.services/DNS_(privacy)). I'm going to set them all up with proper categories in the near future.

👍 1 😆 1

blacklight447 commented

2020-03-03 11:04:10 +00:00

(Migrated from github.com)

Change of URL again (sorry!); I switched from Wiki.js to MediaWiki because the former relies to heavily on JS

shocked pikachu face

> > > Change of URL again (sorry!); I switched from [Wiki.js](https://wiki.js.org/) to [MediaWiki](https://www.mediawiki.org/) because the former relies to heavily on JS *shocked pikachu face*

😆 1

This repo is archived. You cannot comment on issues.