Mullvad has a free DoH service.

You could probably just piggyback off some random DNS server out there that permits public queries. I doubt that most domains are logging everything.

$ egrep "^[a-z]+$" /usr/share/dict/words|shuf|sed "s/$/.com/"|xargs -n1 host -t ns|grep "name server"|cut -d" " -f 4|awk '!seen[$0]++'|xargs -n1 host www.slashdot.org|awk '/^$/ {f=0} /has address/ {f=1} /^Name:/ {if (f) {print}}'
Name: ns2.afternic.com.
Name: ns1.bluehost.com.
Name: ns2.bluehost.com.
Name: ns-570.awsdns-07.net.
Name: ns1.sedoparking.com.
Name: ns02.cashparking.com.
Name: ns01.cashparking.com.
Name: ns1.namefind.com.
Name: ns2.namefind.com.

etc.

That'll look up the DNS server for a bunch of domains and, omitting duplicates, list all of the ones that can resolve "www.slashdot.org", which I imagine likely means that they'll also probably be willing to resolve other domains.

EDIT: Modified the above command line to randomize the order of domains it tries so that if multiple people use this, everyone doesn't just grab the same DNS server.

There's not a ton - however you found Quad9 would have told you about the others.

https://www.privacyguides.org/en/dns/

Mullvad is probably the most trustworthy one.

I use NextDNS, which allows to set filtering rules.

Depends on where you're at. If that's Germany or close to it, we have the Digitalcourage DNS server, OpenNIC. I haven't tested anything else but there's also dnsforge.de, Digitale Gesellschaft in Switzerland, and of course Quad9 who operate globally.

i just use Quad9 too, or firefox's builtin DoH cloudflare since i'm a bit lazy.. (though it's very likely not a good option)

The concept of a privacy friendly DNS resolver is a paradox. You can hope that they dont log your traffic, but you will never know.

• mullvad.net
• dnsforge.de

I always used 4.2.2.2 and 4.2.2.1. Not sure how privacy friendly they are, but probably miles more than 8.8.8.8

What's wrong with Quad9?

Unbound

Run your own

I use DNS.watch and oisd in conjunction with a locally hosted caching dns proxy server.

I've been using a PiHole for years now. It's super easy to set up. In practice, it's been the most reliable thing I keep on a pi. Technically, you don't need to host it on a raspberry pi, but you should host it on an always-on computer on your network.

Kind of a different way of looking at security; you can't guarantee someone's not keeping DNS logs, but you can guarantee that your DNS logs on a hard drive in your house aren't being shared.

Cloudflare (1.1.1.1) is pretty good.

Of course, if you are self hosting, have a look at Unbound - also works nicely in combination with PiHole.