Our great sponsors
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
You could deploy either Pi-hole, or AdGuard Home. I use elements from both Pi-hole and AdGuard (AdGuard's dnsproxy, and Pi-hole's FTL, then Unbound+Redis, but I digress…).
Many users (myself included) opt to leave out third party resolvers entirely and deploy a local recursive nameserver. I use Unbound. In the default recursive operation it queries the root nameservers directly, with responses validated using DNSSEC. So there's no potential of a third party upstream providing incorrect records, either accidentally or deliberately, and no one server gets the opportunity to log the full path of your resolution chain. Your ISP, Cloudflare, Google, OpenDNS or whatever may super duper pinkie promise not to log your resolution history or use it for whatever purpose, but why give them the opportunity to?
You could deploy either Pi-hole, or AdGuard Home. I use elements from both Pi-hole and AdGuard (AdGuard's dnsproxy, and Pi-hole's FTL, then Unbound+Redis, but I digress…).
Related posts
- I don't care what anybody says this is unacceptable. I didn't pay half a grand for the console plus a monthly online fee to still have disgusting, garbage fast food shoved in my face. Sort it out MS.
- The downfall of smart TVs: From promises of seamless viewing to ad tool on steroids - Adguard
- Attempting to Degoogle but also go porn free
- How to know if employer tracks?
- Basic cybersecurity at home