Hacker News Reader

Comment by CiPHPerCoder | Hacker News Reader

Do they support DNSCrypt? If not, what would be the main draw to use this over, say, 8.8.8.8?

Using 8.8.8.8 gives google even more insight into your internet habits, even if you're using e.g. firefox on a webpage that includes no google assets at all (no web fonts, no google analytics etc), google will still know you've been there. Whether that matters to you or not depends on you.

what's a good alternative?

OpenDNS supports DNSCrypt.

208.67.222.222

Although they've been bought by Cisco recently.

You could also just run your own local caching resolver that hits the real root nameservers for lookup.

Running a real, public DNS server is a highly skilled, full time job. I wouldn't touch it with a barge pole and I (roughly) know how to do it.

Not public, probably just a local server for personal use.

It doesn't have to be public.

Running "apt-get install unbound" on your laptop/desktop gives you a local caching recursive resolver which performs dnssec validation.

Doesn't sound like a full time job to me.

But then, unbound is not a "real, public DNS server".

It is not no. chillydawg made the mistake of conflating the two things. Running a, "real, public DNS server" is not required in order to do DNS lookups without using somebody elses recursive resolver.

OpenNIC [https://www.opennicproject.org/]

I like the idea behind OpenNIC and tried it for a few months, but found it less reliable than I wanted it to be.

> We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services.

https://developers.google.com/speed/public-dns/privacy

Yet.

Remember when they said they don't combine data from different properties?

Yeah; and they don't share anything with intelligence agencies either.

That doesn't mean much. They could still correlate and combine information with any anonymized (or rather, what they consider anonymized) personal info. The fact that they even mention that they have permanent logs is quite unsettling.

I would think they'd just dump the data from all of their services into your advertising profile. They won't store your name and such, but they have to have a way of linking this anonymous profile to your google account or something. I doubt that google simply deletes all advertising profile data if you just happen to clear your cookies.

I have no idea what goes on in google. That said, even if they don't correlate with "personal information that you have provided," you as an IP address are still identifiable as that IP address, and correlatable with yourself, for as long as that IP lasts for you.

Which means Google could cause ads to follow you around, for example. Again, I don't know what all they actually do or don't do with their DNS logs, but the quoted "promise" doesn't promise anonymity, just separation of you as a known Google user from you as a semi-anonymous but specific DNS user.

I'm reminded of the early days of the Snowden revelations, when the NSA was saying "it's just metadata."

They do not log the user's IP address. It says so on the page I linked.

per their faq they support DNSSEC but it does not say anything about DNSCrypt. Their argument for use is that they are not tracking your every move like the folks at google. http://www.freenom.world/en/faq.html

DNSSEC is something I don't want.

Umm why!

https://sockpuppet.org/blog/2015/01/15/against-dnssec/

http://www.freenom.world/en/faq.html#q19

> Yes. Freenom World's DNS resolvers can handle DNSSEC requests as any other resolver.

DNSCrypt is not the same thing as DNSSEC.

They don't :(

Reply on news.ycombinator.com