this post was submitted on 13 Jun 2023
2 points (100.0% liked)
Technology
37717 readers
417 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You linked their DNS server, which is not their proxy, but yes I use both.
Cloudflare often comes under fire for privacy concerns, but that's literally true of every public DNS server out there. No one can feasibly run their own DNS server at home. Those requests ultimately have to go somewhere.
I don't use Google's DNS server, because their business model relies on their ability to spy on you. Cloudflare's business model relies on providing reliable network services, and maintaining public trust. In addition, the scale of surveillance they would have to do with the volume of requests they get per second is entirely unfeasible. They simply have too much data flowing through their servers for it to be reasonable.
Could they be spying on me? Yes, but so could anyone, and among the options, they are the least motivated to do so.
Recursive DNS servers will contact root DNS servers. You CAN run a recursive DNS at home quite easily. The only downfall is that root DNS typically doesn't support any of the encrypted DNS options.
Right, and I would prefer to not accidentally make my home DNS server vulnerable to zone transfer attacks, or have all my requests leave my home unencrypted regardless. This can be done, but the risks and overhead outweigh the benefits.
For my threat model (and probably most everyone's), using Cloudflare's encrypted DNS is good enough for me.
I just use the DNS proxy on my Mikrotik. If you communicate with the root DNS servers in plain text, then it can be just sniffed too. Hard to win here as to have to trust something at one point.
the WARP proxy is the renamed ARGO proxy from thier Enterprise product. You can find info in thier docs. Its both thier DNS and the download page for the proxy software, scroll down.