Quad9 gets my vote primarily as it's fast in my location and has malware/phishing filtering. NextDNS has a lot going for it too.
What DNS client to use?
- Thread starter Divine_Barakah
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Feb 25, 2017
- 2,597
- May 13, 2017
- 2,685
Yes, it is currently at version 2.0.42, you can use an updated DNSCrypt Proxy 2.0.45, but with no GUI unfortunately, CMD setup might be challenging.
GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols. - DNSCrypt/dnscrypt-proxy
github.com
- May 10, 2019
- 2,289
Yoga DNS is working perfectly for me. Thank for the recommendation btw.Yes, it is currently at version 2.0.42, you can use an updated DNSCrypt Proxy 2.0.45, but with no GUI unfortunately, CMD setup might be challenging.
GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols. - DNSCrypt/dnscrypt-proxy
OopsClient guys... CLIENT!
I'm using Adguard for Windows currently but have used YogaDNS with both Quad9 (with a browser Ad-Blocker) & NextDNS (without). NextDNS' own client I found unreliable & crashed on WIndows 10.
- Aug 2, 2020
- 549
I was easily able to extract DNSCrypt Proxy 2.0.45 over version 2.0.42 in C:\Program Files\bitbeans\Simple DNSCrypt x64\dnscrypt-proxyYes, it is currently at version 2.0.42, you can use an updated DNSCrypt Proxy 2.0.45, but with no GUI unfortunately, CMD setup might be challenging.
GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols. - DNSCrypt/dnscrypt-proxy
Its seems to be working just fine. WIll need to test it further but it seems stable so far.
Last edited by a moderator:
- Apr 1, 2017
- 1,782
- Mar 21, 2018
- 108
This is the sweet spot for me, as well. I had a whale of a time recently, though, with NextDNS not recognizing Microsoft services, i.e., network connection (did not affect actually connecting to the internet), weather, MS store, etc. In case anyone else has the problem I resolved it by adding www.msftconnecttest.com and dns.msftncsi.com to my NextDNS allow list. So far it's still purring right along.
- Feb 26, 2021
- 972
I am not sure that this qualifies, but I use AdGuard for Windows which has the ability to bind DNS queries to a user-defined server. It seems to work nicely with ControlD and dns over https.
That's how DNS works and with every DNS service and program possible
You can do that also directly in Windows
- Feb 26, 2021
- 972
That's how DNS works and with every DNS service and program possible
You can do that also directly in Windows
Correct. But not securely (yet). That function is in the testing ring. I wasn't sure what constituted a client because Adguard is not like YogaDNS, DNScrypt, nebulo, etc.
- Mar 13, 2021
- 462
I prefer to set DNS on my router than installing a third-party software.
What did you mean? DNS changes on OS level need admin rights, so it is secure.
Using clients for DNS is insecure, increase attack surface and complexity/ instability.
- May 10, 2019
- 2,289
I stopped using NextDNS and I am currently using Adguard for Windows and it is working flawlessly with KTS. I have to mention that sometimes I notice high CPU usage from Adguard service.
- Apr 28, 2015
- 8,948
I guess You disabled Anti-Banner and Private Browsing modules in KTS
- Feb 26, 2021
- 972
I mean that Windows does not yet allow for DoH or LoT at the OS level, but it will soon. It has nothing it do with admin rights, and everything to do with encryption.
Adding upcoming DoH in Windows need admin rights too.
Still don't understand what you mean with secure.
Encrypted DNS isn't for security.
- Feb 26, 2021
- 972
Sure it it. Any time something is encrypted you add security. So, I don't get your argument that encrypted DNS isn't for security when that is literally the point of encryption. Now, one can make the argument that encrypted DNS isn't needed, but that comes down to preference. Again, I'm talking about encrypted DNS, so I don't understand your fascination with local privilegesj. That's apples and oranges. One has nothing to do with the other.
- May 9, 2015
- 630
Encrypted DNS is all about privacy than security. You can still easily get infected by malwares despite sitting on an encrypted DNS configuration.
- Feb 26, 2021
- 972
