122
Warning: NextDNS causes major DNS leak (lemmy.dbzer0.com)
submitted 1 day ago by to c/privacy@lemmy.ml
41 comments fedilink hide all child comments
 

It apprears that NextDNS has removed No Google, No Facebook, and other blocklist without notifying users. One person said the NSA blocklist was also down. The company had made no responses to complaints on the community server when I checked earlier. Crickets...

I noticed Android and Linux being unable to access the app and web interface to confirm connections, starting some time on November 4th. I was able to switch DNS providers on Android and switch back, after which NextDNS seemed to work. On Linux however, systemd confirmed it was enabled but it went right to google's webpage with no block.

If you're on NextDNS, go check your domain filters ASAP. I switched to RethinkDNS, and it's been decent so far. What is everyones preferred solution?

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 1 day ago (3 children)

You should realize that your piholes call to 3rd party DNS servers unless you use something like unbound which queries root DNS servers.

And by the way, those root queries are unencrypted too.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 20 hours ago (2 children)

    I do use unbound with CIRA.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 14 hours ago (1 child)

    CIRA is hosted in Canada which is part of FVEY.

    Sorry I'm not trying to nitpick. Everyone has their own threat tolerance.

    I personally just use ODoH for now. Mostly using RethinkDNS with ODoH

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 9 hours ago

    I understand that CIRA is Canadian. I wanted to make sure it was not going to big tech if Unbound could not do its thing. I live here in Canada, with three static IP addresses so they know about me just as much as they already know about anyone who has a domain (or two) ending in .ca!

    After you mentioned ODoH I looked it up, I read about it and was going to see if unbound supported it and at this point in time it does not appear that they do. I was not going to admit defeat so I looked up DoH, no dice unbound does not support it but they do support DoT, I spent the last few hours learning about and deploying DoT from unbound to CIRA.

    When CIRA changes there retention standards I may look for something else.

    I want to thank you for enlightening me on my journey for more privacy.

  • permalink
  • fedilink
  • source
  • parent