<story><title>The Big DNS Privacy Debate at FOSDEM</title><url>https://blog.powerdns.com/2019/02/07/the-big-dns-privacy-debate-at-fosdem/</url></story><parent_chain></parent_chain><comment><author>rnhmjoj</author><text>DNSCrypt has been around for a decade and works really well.
Did everyone forget about it?&lt;p&gt;It&amp;#x27;s objectively better than running DNS queries over HTTPS: still UDP based, no need to trust a CA but only the DNS server public key, can be cached locally or network-wise, perfect forward secrecy.&lt;p&gt;There are clients[1] for Windows, Android, BSD, Linux, macOS and lots of providers[2].
It&amp;#x27;s really a shame it hasn&amp;#x27;t been made into a standard.&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;jedisct1&amp;#x2F;dnscrypt-proxy&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;jedisct1&amp;#x2F;dnscrypt-proxy&lt;/a&gt;&lt;p&gt;[2]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;dnscrypt.info&amp;#x2F;public-servers&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;dnscrypt.info&amp;#x2F;public-servers&lt;/a&gt;</text></comment>
<story><title>The Big DNS Privacy Debate at FOSDEM</title><url>https://blog.powerdns.com/2019/02/07/the-big-dns-privacy-debate-at-fosdem/</url></story><parent_chain></parent_chain><comment><author>wtmt</author><text>In India, several websites get blocked by different ISPs based on some highly unsubstantiated petitions to some court that doesn’t understand what the right move is and just sends the list of domains to be blocked to some ISPs, who gladly comply without any checks or questions. Users see a message saying that the site has been blocked because of some order from the Department of Telecommunications.&lt;p&gt;There is no grievance management process, no way for legitimate sites to get a quick reprieve when they get blocked either due to operator error or issues with the petitions not being vetted and investigated for malicious intent (a competitor could easily knock you off in some states or regions and you wouldn’t even know).&lt;p&gt;While there are activists working on policies and campaigning for better laws, we really need stronger technological solutions against these (usually ridiculous) blocks that insult “due process” and harm people.&lt;p&gt;India is also very quick to rap on large multinational companies whenever they seem to provide something that those in power (or their supporters) frown upon. So centralized providers like Google DNS or Cloudflare DNS would have some tough times with the governments, since both have physical presence in the country with their servers&amp;#x2F;data centers.&lt;p&gt;&lt;i&gt;A decentralized and yet secure&amp;#x2F;private DNS may be more resilient than these DoC (DNS over Cloud) providers if we have to deal with government censorship effectively.&lt;/i&gt;</text></comment>