On Mon, 2021-03-08 at 10:08 +0200, Dimitris via Dng wrote: > Στις 8/3/21 12:29 π.μ., ο/η Rick Moen έγραψε: > > Leaving aside my being disappointed about people willingly > > outsourcing > > their recursive DNS to the second-nosiest company on the planet[1] > > +1.1.1.1 ... don't forget cloudflare bullies.. > > > but i do forward local queries to opennic (w/ dnscrypt) and a couple > more trusted sources.. eg. libreops.cc offer a public resolver and > another DoT/DoH & i do also forward to tor-resolve occasionally... > > so, i would be interested to know, if there's a privacy issue with > opennnic? > leaving the overlord (=icann) aside, seems like a good idea to me..
I wonder the same thing. I guess what appeals to me about opennic is that they address some of the problems with the way dns is handled elsewhere. Of course running your own dns server is optimal. But it doesn't do a better job to address privacy, and it doesn't make dns into a community issue like opennic is trying to do. As a dns server operator, with opennic you also get the opportunity to invite other anonymous (to you) people to share your dns server, thus pooling your dns queries, which can be good for privacy. If you're not running your own dns server when using opennic, you're relying on the truthfulness of the dns server operator when they checked or didn't check the flags indicating if they keep logs. That's obviously not a very trustworthy indication, but it's nice that they're addressing privacy right up front. I don't know of anyone trying to do what opennic is trying to do. Are there competing ideas in the realm of dns communities? In the absence of a "community of dns server operators and users", is the optimal option to have everyone run their own recursive server? But then the upstream servers still get the birds-eye view and will very likely abuse that information like the big companies do now. I don't mean just to defend opennic, if there are competing or better ideas out there, that would be good to know. I'm just throwing out my 2 cents on the matter. Gabe _______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
