Hacker News Reader

Comment by bhauer | Hacker News Reader

Awesome! Is this available as software I can install on my network? Sorry, probably a dumb question.

Nope, just point your machine or router's DNS to use opendns resolvers instead of your regular ones: 208.67.222.222 and 208.67.220.220

Do you have a link on the opendns web site that refers to those specific Ips?

https://www.opendns.com/setupguide/

One can go even further and install DNSCrypt:

https://dnscrypt.org/

Any downsides to using this? I'm tempted to start using it, but I'm not really sure if there's any particular thing I should consider first.

Be aware that some things (Netflix, Comcast, Youtube) expect you to use your local DNS server so that they can route you to the nearest media server. Using a central IP Address like what is mentioned here can result in unsatisfactory video streaming....at least that's what I found with our Apple TV.

OpenDNS sends your "EDNS client subnet" to some CDNs including Google, though maybe not Apple.

https://www.opendns.com/enterprise-security/technology/globa...

Yes, but beware, they (at least used to) resolve unknown names to a page filled with ads.

They stopped that.

https://www.opendns.com/no-more-ads/

That's good to know - the ads are the reason I reluctantly switched from OpenDNS to google.

(Reluctantly in that Google already has enough of my data, thanks, through gmail, search, maps, docs and other services, not because it doesn't work well.)

Google DNS doesn't store any identifiable/private data, as far as I understand?

https://developers.google.com/speed/public-dns/privacy

Yea, but it's also plaintext. Super easy to tap, if I understand correctly.

Still, I prefer it to isps snooping.

Reply on news.ycombinator.com