diff --git a/_includes/sections/dns.html b/_includes/sections/dns.html
index 6ce9a3c3..ded7b326 100644
--- a/_includes/sections/dns.html
+++ b/_includes/sections/dns.html
@@ -33,10 +33,278 @@ github="https://github.com/jedisct1/dnscrypt-proxy"
NoTrack - A network-wide DNS server which blocks Tracking sites. Currently works in Debian and Ubuntu.
Namecoin - A decentralized DNS open source information registration and transfer system based on the Bitcoin cryptocurrency.
Pi-hole - A network-wide DNS server for the Raspberry Pi. Blocks advertising and tracking domains for all devices on your network.
- ICANN DNS resolvers with support for encrypted DNS
-
- - AdGuard DNS - A commercial, anycast DNS resolver with ad-blocking and support for DNS over HTTPS (DoH), DNS over TLS (DoT), and DNSCrypt. Warnings
- - BlahDNS - A small hobby ad-blocking DNS project with DoH, DoT, and DNSCrypt support. Servers located in Switzerland, Japan, and Germany. Warnings
- - PowerDNS - A best effort DoH service. Servers located in the Netherlands.
- - Quad9 DNS - A non-profit, anycast DNS provider founded by IBM, PCH, and Global Cyber Alliance. Provides malicious domain filtering and supports DoH, DoT, and DNSCrypt. Warnings
+
+ Encrypted ICANN DNS Providers
+
+
+ Note: Using an encrypted DNS resolver will not make you anonymous, nor hide your internet traffic from your Internet Service Provider. But it will prevent DNS hijacking, and make your DNS requests harder for third parties to eavesdrop on and tamper with. If you are currently using Google's DNS resolver, you should pick an alternative here.
+
+
+
+
+
+
+ ICANN DNS Provider |
+ Server Locations |
+ Privacy Policy |
+ Type |
+ Logging |
+ Protocols |
+ DNSSEC |
+ QNAME Minimization |
+ Filtering |
+ Source Code |
+
+
+
+
+
+ AdGuard
+ |
+ Anycast (based in Cyprus) |
+
+
+
+
+ |
+ Commercial |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Ads, trackers, malicious domains |
+
+
+
+
+ |
+
+
+
+
+ BlahDNS
+ |
+ Switzerland, Japan, Germany |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Ads, trackers, malicious domains |
+
+
+
+
+ |
+
+
+
+
+ Cloudflare
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Commercial |
+ Some |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ No |
+
+
+
+
+ |
+
+
+
+
+ CZ.NIC
+ |
+ Czech Republic |
+
+
+
+
+ |
+ Association |
+ No |
+ DoH, DoT |
+ Yes |
+ Yes |
+ ? |
+ ? |
+
+
+
+
+ dnswarden
+ |
+ Germany |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on server choice |
+ ? |
+
+
+
+
+ Foundation for Applied Privacy
+ |
+ Austria |
+
+
+
+
+ |
+ Non-Profit |
+ Some |
+ DoH, DoT |
+ Yes |
+ Yes |
+ No |
+ ? |
+
+
+
+
+ nextdns
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Commercial |
+ Based on user choice |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on user choice |
+ ? |
+
+
+
+
+ PowerDNS
+ |
+ The Netherlands |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH |
+ Yes |
+ No |
+ No |
+
+
+
+
+ |
+
+
+
+
+ Quad9
+ |
+ Anycast (based in US) |
+
+
+
+
+ |
+ Non-Profit |
+ Some |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Malicious domains |
+ ? |
+
+
+
+
+ SecureDNS
+ |
+ The Netherlands |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoH, DoT, DNSCrypt |
+ Yes |
+ Yes |
+ Based on server choice |
+ ? |
+
+
+
+
+ UncensoredDNS
+ |
+ Anycast (based in Denmark) |
+
+
+
+
+ |
+ Hobby Project |
+ No |
+ DoT |
+ Yes |
+ No |
+ No |
+ ? |
+
+
+
+
+
Terms
+
+
+ - DNS-over-TLS (DoT) - A security protocol for encrypted DNS on a dedicated port 853.
+ - DNS-over-HTTPS (DoH) - Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443.
+ - DNSCrypt - An older yet robust method of encrypting DNS.
+
+
+
Worth Mentioning and Additional Information
+
+
+ - Firefox comes with built-in DoH support with Cloudflare set as the default resolver, but can be configured to use any DoH resolver. Currently Mozilla is conducting studies before enabling DoH by default for all US-based Firefox users.
+ - Android 9 comes with a DoT client by default.
+ -
+ DNSCloak - An open-source DNSCrypt and DoH client for iOS by
the Center for the Cultivation of Technology gemeinnuetzige GmbH.
+
+ -
+ Stubby - An open-source application for Linux, macOS, and Windows that acts as a local DNS Privacy stub resolver using DoT.
+
+ - QNAME Minimization and Your Privacy by the Internet Systems Consortium (ISC)
+ - DNSSEC and BIND 9 by the ISC
+
+
\ No newline at end of file
diff --git a/source_code.md b/source_code.md
index 7ddd358a..b91f9331 100644
--- a/source_code.md
+++ b/source_code.md
@@ -258,21 +258,40 @@ Backend: closed-source
GNU Social: https://gnu.io/source/
## Domain Name System (DNS)
- Njalla: Non-free/Proprietary Software
- DNSCrypt: https://github.com/dnscrypt
+Njalla: Non-free/Proprietary Software
+
+DNSCrypt: https://github.com/dnscrypt
+
DNSCrypt-proxy: https://github.com/jedisct1/dnscrypt-proxy/
- OpenNic: https://github.com/opennic/ (mostly)
+OpenNic: https://github.com/opennic/ (mostly)
+
Webpage: https://github.com/opennic/opennic-web
- Worth Mentioning
+### Worth Mentioning
- NoTrack: https://github.com/quidsup/notrack
+- NoTrack: https://github.com/quidsup/notrack
- Namecoin: https://github.com/namecoin
+- Namecoin: https://github.com/namecoin
- Pi-hole: https://github.com/pi-hole
+- Pi-hole: https://github.com/pi-hole
+
+## Encrypted ICANN DNS Providers
+
+AdGuard DNS: https://github.com/AdguardTeam/AdGuardDNS/
+
+BlahDNS: https://github.com/ookangzheng/blahdns/
+
+CloudFlare DNS: https://github.com/cloudflare/dns
+
+PowerDNS: https://github.com/PowerDNS/pdns
+
+### Worth Mentioning and Additional Information
+
+- DNSCloak: https://github.com/s-s/dnscloak
+
+- Stubby: https://github.com/getdnsapi/stubby
## Digital Notebook
Joplin: https://github.com/laurent22/joplin
|