ThanksQuad9 | A public and free DNS service for a better security and privacy
A public and free DNS service for a better security and privacywww.quad9.net
You can find the partners here. Not all are listed. As they say, partners from sensitive industry like finance or Health aren't listed. You can go to the partners mentioned individual websites to find out more about them.
Right but as I said that's the result from one of the tests. You can check the Lawrence systems tests, NextDns was good but much behind Quad9.
Because I don't want to block ads on a network level, it results in too many "tech support" requests I don't have time for. And I don't want to sleep on the couch. I found it to work well on a device level basis if I am the one managing the device.
But oisd is regularly checked for false positives and is actually meant for those who prefer functionality over aggressive blocking. Did you really have problems with it?
Currently I can do parental controls from my router, but yes those kinds of features from NextDNS are great.
I never had any FPs personally. But leave it to a partner who window shops online in their free time to find something even OISD will break. It also messed with streaming sticks, mainly it kept the PBS kids app from working at all and I couldn't figure out what to exclude despite excluding just about everything that popped up when that stick was active.
This. Use Nextdns for my devices but for everyone else it's a UBO/Adguard browser plugin.
Well Quad9 does what it says. So, you can rest assured about that.
If you are worried about CDN performance for things like streaming you can use 9.9.9.11, their DNS with ECS support. Just know that the CDNs will be able to see part of your IP associated with the DNS request and know what city you are in. For me, that's fine, but for others that's an issue. If you are using a big ISP like Verizon or Comcast (in the US for example) they have cached servers that host things like Netflix on their edge systems that will be faster and don't (supposedly) get accessed when going with an outside DNS provider.
I used to use Nextdns, but as I investigated more, I found around 35 percent of the free public lists that they use for their protection features like Threat intelligence feeds, Typosquating protection, Cryptojacking protection, Blocking parked domains are outdated and haven't been updated for months. Even the rest of other threat feeds ,many don't even receive daily updates, let alone hourly updates.
Yeah, they have been pretty spotty with responses to issues. As for Quad9, I had a routing issue the other day and within 8 hours I got a thorough and detailed response, which I really appreciated.
Exactly, even after being free and providing such a reliable threat intelligence, their responses over emails are commendable.
Yes, they were quick to respond. They couldn't fix the issue due to my ISP, but they explained thoroughly why it was happening and informed me of an upcoming change in the near future near me that might help.
medium.com
No, there's no need to disable protection features. What would happen when outdated lists are being used, is that probably those domains in the lists are already dead. And of course the new malicious ones aren't being added. So if the old domains are present in any case, the lists might help. There could be false positives, but i would recommend to add them manually in the allow list.
So really for a bog standard home router config, NextDNS isn't the answer.
