92 lines
4.2 KiB
HTML
92 lines
4.2 KiB
HTML
---
|
|
layout: page
|
|
permalink: /providers/dns/
|
|
title: "Encrypted DNS Resolvers"
|
|
description: "Don't let Google see all your DNS traffic. Discover privacy-centric alternatives to the traditional DNS providers."
|
|
breadcrumb: "DNS"
|
|
---
|
|
|
|
{% include sections/dns.html %}
|
|
|
|
<h1 id="dns-desktop-clients" class="anchor">
|
|
<a href="#dns-desktop-clients">
|
|
<i class="fas fa-link anchor-icon"></i>
|
|
</a> Encrypted DNS Client Recommendations for Desktop
|
|
</h1>
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="Firefox's built-in DNS-over-HTTPS resolver"
|
|
image="/assets/img/svg/3rd-party/firefox_browser.svg"
|
|
description='Firefox comes with built-in DoH support with Cloudflare set as the default resolver, but can be configured to use any DoH resolver.'
|
|
labels="warning:<a href=//developers.cloudflare.com/1.1.1.1/privacy/firefox>Warning</a>:Cloudflare has agreed to collect only a limited amount of data about the DNS requests that are sent to the Cloudflare Resolver for Firefox via the Firefox browser."
|
|
website="//support.mozilla.org/en-US/kb/firefox-dns-over-https#w_about-dns-over-https"
|
|
privacy-policy="//wiki.mozilla.org/Security/DOH-resolver-policy"
|
|
forum="TBD"
|
|
%}
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="dnscrypt-proxy"
|
|
image="/assets/img/svg/3rd-party/dnscrypt-proxy.svg"
|
|
description='A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and <a href="//github.com/DNSCrypt/dnscrypt-protocol/blob/master/ANONYMIZED-DNSCRYPT.txt">Anonymized DNSCrypt</a>.'
|
|
website="//dnscrypt.info/"
|
|
forum="TBD"
|
|
github="//github.com/DNSCrypt/dnscrypt-proxy"
|
|
%}
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="Unbound"
|
|
image="/assets/img/svg/3rd-party/unbound.svg"
|
|
description='Unbound is a validating, recursive, caching DNS resolver, supporting DNS-over-TLS, and has been <a href="//ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/">independently audited</a>.'
|
|
website="//nlnetlabs.nl/projects/unbound/about/"
|
|
forum="TBD"
|
|
github="//github.com/NLnetLabs/unbound"
|
|
%}
|
|
|
|
<h1 id="dns-android-clients" class="anchor">
|
|
<a href="#dns-android-clients">
|
|
<i class="fas fa-link anchor-icon"></i>
|
|
</a> Encrypted DNS Client Recommendations for Android
|
|
</h1>
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="Android 9's built-in DNS-over-TLS resolver"
|
|
image=""
|
|
description='Android 9 (Pie) comes with built-in DNS-over-TLS support.'
|
|
labels="warning:<a href=//android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html>Warning</a>:However, apps that perform their own DNS queries, instead of using the system's APIs, must ensure that they do not send insecure DNS queries when the system has a secure connection."
|
|
%}
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="Nebulo"
|
|
image="/assets/img/png/3rd-party/nebulo.png"
|
|
description='An open-source application for Android supporting DNS-over-HTTPS and DNS-over-TLS. It also supports caching DNS responses and locally logging DNS queries.'
|
|
website="//git.frostnerd.com/PublicAndroidApps/smokescreen/-/blob/master/README.md"
|
|
privacy-policy="//smokescreen.app/privacypolicy"
|
|
forum="TBD"
|
|
fdroid="https://git.frostnerd.com/PublicAndroidApps/smokescreen#f-droid"
|
|
googleplay="https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen"
|
|
source="//git.frostnerd.com/PublicAndroidApps/smokescreen"
|
|
%}
|
|
|
|
<h1 id="dns-ios-clients" class="anchor">
|
|
<a href="#dns-ios-clients">
|
|
<i class="fas fa-link anchor-icon"></i>
|
|
</a> Encrypted DNS Client Recommendations for iOS
|
|
</h1>
|
|
|
|
{%
|
|
include cardv2.html
|
|
title="DNSCloak"
|
|
image="/assets/img/png/3rd-party/dnscloak.png"
|
|
description='An open-source DNSCrypt and DNS-over-HTTPS client by <a data-toggle="tooltip" data-placement="bottom" data-original-title="A charitable non-profit host organization for international Free Software projects." href="//techcultivation.org/">the Center for the Cultivation of Technology gemeinnuetzige GmbH</a>. Can be described as <a href="//github.com/DNSCrypt/dnscrypt-proxy">dnscrypt-proxy</a> for iOS.'
|
|
website="https://github.com/s-s/dnscloak/blob/master/README.md"
|
|
privacy-policy="//drive.google.com/file/d/1050No_pU74CAWUS5-BwQWyO2x_aiMzWc/view"
|
|
ios="https://apps.apple.com/app/id1452162351"
|
|
github="//github.com/s-s/dnscloak"
|
|
%}
|
|
|
|
<h2 id="dns-further-reading">Further Reading</h2> |