Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)VE
Posts
3
Comments
138
Joined
2 yr. ago

  • I've read reports of 3% to 10% battery usage with Wireguard on smartphones. To me even 1% would be too much but maybe that's not the case for you. I don't mind paying 2 bucks a month for a great product that is extremely simple to set up. If you prefer the way with Wireguard + Pi-hole than that's of course fine. To each their own.

  • True but a VPN connection drains your phone's battery quite well. That's why I never liked that option and prefer just using a DNS server with adblocking feature since it has 0 impact on your phone's bettery life.

  • Yes, but they don't. That's where I have to criticize NextDNS. It feels like the devs just let it run but stopped development. They still even offer a block list called "Energized" which is dead with all entries removed since I think 2021. They just don't care about updating anything. Don't get me wrong because I still like NextDNS very much. It's working completely fine as it is right now but it's just not getting updates (anymore).

    My problem with a Pi-hole is that it only works in your LAN. You can't make use of it on your phone when you're not at home. This is where NextDNS is better. You might wanna use NextDNS only on your mobile devices. 300,000 queries per month are free anyway. Or just use RethinkDNS which is completely free right now but you need their app to have a white- and blacklist.

  • My computer uses unencrypted DNS and sends the queries to my router. My router does the encryption for forwarded DNS queries sent to the internet. There's no need to encrypt DNS traffic in a LAN unless you don't trust this LAN. The WAN (internet) is where evil people try to snoop on you.

  • Root hints are DNS data stored in a DNS server. The root hints provide a list of preliminary resource records that can be used by the DNS service to locate other DNS servers that are authoritative for the root of the DNS domain namespace tree.

    Source

    This just means that your local DNS server doesn't need to use the root DNS servers to resolve domain names but instead uses other authorative DNS servers in the internet to resolve your queries. So anyway you have to trust an upstream DNS server owned by someone else in the internet. There's no way around it unless you use hyperlocal.

  • Sounds like it's pretty much the same as NextDNS this way. Did you ever use NextDNS? If the answer is yes: What made you go with RethinkDNS over NextDNS?

    Edit: I just checked it out since it's free. It's probably great in combination with their app but without the app you lack a custom white- and blacklist and a query log. Means if you don't wanna use the app then you can just manage your filter lists but that's it. And there's only an app for Android so it's not very attractive to use on non-Android devices.

  • Yes but I think only very few applications use a hard coded DNS server. And under all those applications who use a hard coded DNS server is probably a very low percentage that uses encrypted DNS.

  • Depends on your needs. The problems with DNS servers from ProtonVPN, Mullvad and so on is that they use their own filter rules and you can't castumize them to your needs. You can probably go much stricter with what you want to block if you use a DNS based adblocker where you can manage your own filter rules.

  • Well, you will always need an upstream DNS server to surf the internet. Even your DNS server in your LAN needs an upstream DNS server or it can't resolve domain names. This means whatever upstream DNS server you use you need trust it. Imo NextDNS is a good choice here.