The Domain Name System, DNS is something most people don’t think about. But it could be slowing you down or even exposing you to security issues.
Here are five things to know about DNS:
1: You can speed things up. Most ISPs frankly don’t spend a lot of time optimizing DNS. So replace it. Google’s 188.8.131.52 DNS uses global coverage and load balancing to give fast domain resolution. Although it will collect your data.
2: You can get extra protection. Cisco-owned OpenDNS has built-in identity theft protection and even parental controls for free. Keep in mind OpenDNS also collects some data about you. Quad9 on other hand at 184.108.40.206 uses real-time info to block phishing and malware and Quad 9 does not store your data.
3: You can stay private and fast. Cloudflare offers a service at 220.127.116.11 which is not only fast but encrypted. Cloudflare promises to wipe all logs within 24 hours to insure privacy.
4: There are also ipv6 public DNS Servers. It’s not as catchy but Google’s is 2001:4860:4860::8888 and Quad 9’s is 2620:fe::fe.
SEE: Domain Name System (DNS) Policy (TechPro Research)
5: This is one you can’t do yourself yet, unless you’re in with the folks working on Oblivious DNS at Princeton. Without requiring a change to DNS structure, Oblivious uses two servers on either side of the Recursive DNS server so that the DNS server doesn’t know what you’re requesting and top level servers don’t know who you are. Promising!
There are loads more out there with special features and promises. Just make sure you read the data collection policies and are comfortable with what they are. And remember even a DNS is not a VPN, so it doesn’t secure your entire network. But that said it’s another brick in that security wall, so it’s worth looking into.
How to set DNS nameservers in Ubuntu Server 18.04 (TechRepublic)
Oblivious DNS could protect your internet traffic against snooping (TechRepublic)
18.104.22.168: Cloudflare’s new DNS attracting ‘gigabits per second’ of rubbish (ZDNet)
What are the fastest DNS providers? (ZDNet)