dnscrypt-proxy VS dohot

[anonymized_dns] routes = [ { server_name='*', via=['anon-plan9-ns2', 'anon-plan9-dns'] } ] skip_incompatible = true ``` I have all the default sources and lists enabled, and have not added any of my own. Load balancing is left on the default (p2). The documentation states::

It's up to you whether you trust Cloudflare or not. There are a lot of other DNS providers that can do DNSCrypt, DoH, or DoT. I think Firefox even lets you enable it by default very easily in the network settings.

I’m not familiar with DNSCrypt, but I found there might be a specific thing you need to run to completely uninstall it: https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/windows/

Maybe check out the documentation? https://github.com/DNSCrypt/dnscrypt-proxy/wiki

This is FUD. This possibility has nothing to do with HTTP vs. [some other DNS-like protocol] sitting on top of an encrypted connection.

This possibility is, however, enabled by having the application package its own DNS resolution.

If you want to use DNS over HTTPS as a system-wide daemon, you can use DNSCrypt 2 (https://dnscrypt.info/ ) and disable DoH within Firefox/Chrome.

My personal use-case is that I use DNSCrypt-Proxy (DoH) with dnsmasq (caching), and use very strict filters to block domains. I don't face any issues with the websites that I use regularly, but in some cases it can cause problems. Having DoH support in Firefox saves me time and effort it would take. I don't have to find and whitelist the domain(s), remove the filter(s) entirely, or disabling system-wide DoH, as I can just use a different resolver specific to Firefox.

I use dnscrypt-proxy[0] which round-robins to a bunch of upstream servers, plus encryption.

[0] https://github.com/DNSCrypt/dnscrypt-proxy

most ISPs override dns requests done over http, even if they're going directly to root servers. to be sure your ISP isn't logging, you need a DoH server. to be sure the DoH server isn't logging, you need to connect to it through Tor. this known as DoHoT, or DNS over HTTPS over Tor. if you're interested in setting it up, take a look at this: https://github.com/alecmuffett/dohot. bone thing to be aware of when setting this up with pihole is that dnscrypt-proxy listens on the same port 53 as pihole by default, so be sure to change that in the dnscrypt config.

dnns over https over tor is the answer https://github.com/alecmuffett/dohot www.anonymousplanet.org

Alec Muffet has something similar: https://github.com/alecmuffett/dohot

DoHoT: making practical use of DNS over HTTPS over Tor https://github.com/alecmuffett/dohot

DNSCrypt-proxy (to achieve DoHoT)