Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Been running it myself for 5-6 months, and other than the occasional (actually, very rare) complaint from the Mrs. that a link she clicked won't go through due to a blocked tracker/analytics intermediary, it's been a peachy time VPNing into our home network so it works just as well on the go.

Our install Pi-Hole points its upstream DNS to 1.1.1.1, with uBlock Origin where possible installed on our devices. Can't imagine going back.



What advantage is there in using 1.1.1.1 instead of your own DNS resolver?


To add to a1369209993's comment, an alternate DNS might be faster (as Cloudflare claims for 1.1.1.1), too. Or more stable than your default DNS. But for me, anyway, I made the switch after Frontier started pulling the NXDOMAIN stunt.


Some ISP-provided resolvers fraudulently replace NXDOMAIN responses with NOERROR IN As pointing to (ironically, in this context) advertisment sites.


I'm aware of the problems with ISP-provided resolvers. I meant running your own resolver, like named, which queries the root zones itself, supports DNSSEC response authentication, etc.


In that case: local resolvers involve actually installing and configuring a recursive dns server, which isn't everyone's idea of fun, whereas 1.1/8.8.8.8 can be set up with a one line config file edit and then forgotten about.


...also censorship. Even my German ISP (Vodafone) apparently reroutes some URLs to servers they control.

Solved it with DNS66.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: