Battle Which DNS would you choose for Security and Content blocking?

[Tempnexus]

I would like to add a second opinion Content and Malware blocking on top of my Sophos UTM.
Giving that speculation which DNS would you choose?
Norton DNS
Comodo DNS
Open DNS
Fools DNs

 

[ForgottenSeer 823865]

Last thing ANYONE should want is having Google see EVERYTHING you visit.

Which doesn't matter at all if you don't use your real name with it, and even if you do what risks do you have? Just targeted ads instead of random ones?
I rather have Google data mining me than some supposedly famous privacy-conscious services/orgs trying to do it in my back but pretending they don't and won't...

 

[Moonhorse]

im going to say done is right i tried them all also and google by far is the most reliable and fastest to me

Same for me, google is faster than cloudflare so i use google instead

Also using google chrome currently, and it happens to be less bloated of all other chromium variants lol

 

[TairikuOkami]

I just ran this DNS speed test.

That test sends only 2 DNS requests. Some DNS servers stall after too many requests. I use Google namebench, there is also GRC namebench.

 

[RejZoR]

Which doesn't matter at all if you don't use your real name with it, and even if you do what risks do you have? Just targeted ads instead of random ones?
I rather have Google data mining me than some supposedly famous privacy-conscious services/orgs trying to do it in my back but pretending they don't and won't...

The "I don't have anything to hide so it's fine" is strong with this one... Sole existence of Google these days is to hoard user data so they make billions out of it. And what are you in it for? You get nothing from it. If you think the use of their crappy services for free, then you don't value your private data enough on any level.

 

[ForgottenSeer 823865]

The "I don't have anything to hide so it's fine" is strong with this one... Sole existence of Google these days is to hoard user data so they make billions out of it.

Of course ! it is a business, not a charity club LOL
if i was Google CEO i would do the same and probably worse ! me too i want yacht, villas, sport cars, private jet, and dozen of hot sexy models as girlfriends.

And what are you in it for? You get nothing from it.

why should i get something? i used their well-made services for free when others ask me to pay cash, yeah... if for you it is nothing...

If you think the use of their crappy services for free, then you don't value your private data enough on any level.

crappy? talk for yourself...

Google Maps? saved me hundreds of times when i was lost in countries i visited or even mine when i need the fastest route possible.
Gmail? most efficient service i ever used for casual mails.
Google Translate? using it daily since i live in a foreign country where i dont master the language, can't live without it..and no way, i will carry a 5kg dictionary with me LOOOOOL
Android? well without it i won't have a phone with decent functionalities, Iphone, no thanks i won't get ripped of....
oh and i forgot, Google Search, yeah well im happy it replaced Yahoo or Netscape LOL

So unless you live in a cave, all those service are very useful and i didn't find any valuable replacements.

My datas? well if google is interested by Umbra and my many fake accounts useless datas, so be it

You blame Google but you still use Windows, right...?
still have a bank account where all your transactions are recorded?
still go to hospital right where every doctors/nurse can access your health datas?

yeah yeah maybe i should open a tinfoil cloth shop, i probably will make a fortune LOOOOL

 

[RejZoR]

Oh boy your priorities are so messed up I don't even know where to begin. Just because one has access to your personal data, that doesn't mean everyone should just get it all because one does. That's such a moronic and absolutely backwards logic. Also don't be so sure your anon profile is not linked to real you at one point given how big corp tentacles have reach into many things we don't even know yet.

 

[Burrito]

Oh boy your priorities are so messed up I don't even know where to begin. Just because one has access to your personal data, that doesn't mean everyone should just get it all because one does. That's such a moronic and absolutely backwards logic. Also don't be so sure your anon profile is not linked to real you at one point given how big corp tentacles have reach into many things we don't even know yet.

“Priorities?” --- no, I think Umbra is talking about "Realities.”

The more ‘established’ you become in life, the more ‘they’ have your information. In many cases, they need your information. Schools, mortgages, loans, passports, vehicles, jobs, credit cards, ISPs, medical stuff...

In a perfect world, we’d all have absolute privacy.

In the world in which we operate, we don’t get that. Especially if you are ‘established.’

More established = Less Privacy.

I agree with you -- we should not just give our privacy away.

I took a job once where they investigated my entire history going back to birth... and even pre-birth. Did I like that? No. But I did want the job. And it is what it is what it is....

 

[oldschool]

Adguard DNS did well in my informal testing for security. It seems about as fast as Cloudfare. I haven't tried any other DoH resolvers.

Bonus fact: Windows Defender caught a trojan in naked testing with only Brave's hardened configuration via flags, etc. + DNS.

 

[ForgottenSeer 823865]

Oh boy your priorities are so messed up I don't even know where to begin. Just because one has access to your personal data, that doesn't mean everyone should just get it all because one does. That's such a moronic and absolutely backwards logic. Also don't be so sure your anon profile is not linked to real you at one point given how big corp tentacles have reach into many things we don't even know yet.

Come back in the real world my friend, everything you interact in the real world is 10 times more intrusive and potentially dangerous than what Google does with your datas.
Google doesn't ask my credit card, it doesn't ask my incomes or health history, it doesn't ask my previous job experiences, it doesn't share my criminal records with other entities, etc...
Google only get what you willingly expose on the net.

And even when if i use my real Identity, the risks are insubstantial, I don't get my bank account compromised and emptied by Google or MS.
What are you afraid of? give me a concrete example of Google hurting you IRL.

Also, I never said anyone should access my datas, but I prefer it is Google or some well established giants with serious security standards and which are accountable and able to pay if they mess up than some obscure little companies that may disappear in the wind once issues appears.
Instead of bashing tech giants for trivial matters, you should be more worried about how some online shops or government sites handle your REAL sensitive datas (credit card infos, etc...) and how is their level of security. I don't see Google or MS being breached and customers infos being sold online...

If you are so much worried on privacy, you wouldn't even put a feet on internet and even less using Windows as you surely do...

And as @Burrito said I don't talk about priorities but realities. I don't theorize about eventual evil deeds made by Evil Corp. I'm way past that.
Not saying no one forces you to be on internet and even less forcing you to use MS or Google products, you have decent alternatives.

I still expose what I want, nobody forces me to be on internet or put my real infos on the net.

Anyway this isn't the thread for such discussion.

 

[Handsome Recluse]

Google only get what you willingly expose on the net.

University already gave my real name to Google and Microsoft -_- . My name is still too common though in my place. What countries give English names and Spanish surnames?

 

[ForgottenSeer 823865]

University already gave my real name to Google and Microsoft -_- . My name is still too common though.

because they requires you to use some Google services (i bet G-Drive) or MS Office account i guess.

You are just confirming what i and @Burrito said, reality defeats ideology; you can of course dislike something but if it is mandatory in your life or job, you have to use it, and i bet @RejZoR won't quit his job if someday it requires him to use some Google services...

 

[Handsome Recluse]

1) Pi-Hole
2) My own encrypted DNS (non-disclosed)
3) CleanBrowsing DNS - Protecting our families and kids when visiting the web. Free DNS Parental Control, DNS Filter and Web filter.

Those three would be my picks.

What happened to Quad9?

 

[South Park]

I've been using Quad9 with DoH on Firefox for several months. Performance seems OK here, and I like their privacy policy and malware-blocking criteria. (Cloudflare seems subjectively faster to me, but it doesn't block malware at this time.)

 

[oldschool]

(Cloudflare seems subjectively faster to me, but it doesn't block malware at this time.)

I found cloudfare did block a very few phishing sites. Frankly, I was surprised. Adguard kills it. I'll give Quad9 a try.

 

[blackice]

I found it did block a very few phishing sites. Frankly, I was surprised. Adguard kills it. I'll give Quad9 a try.

Quad 9 is a lot slower to add sites. Cleanbrowsing has done very well in testing and they have a security only filter if you have a penchant for the not so wholesome part of the web.

 

[SeriousHoax]

I found it did block a very few phishing sites. Frankly, I was surprised. Adguard kills it. I'll give Quad9 a try.

Adguard DNS also started blocking the 3rd party trackers that disguise as 1st party. So, ads+trackers blocking and also blocks some phishing and malicious websites. It's very good indeed.

 

[Burrito]

Adguard DNS also started blocking the 3rd party trackers that disguise as 1st party. So, ads+trackers blocking and also blocks some phishing and malicious websites. It's very good indeed.

Ah............ now this is interesting.

I'll check it out.

Thanks.

 

[Handsome Recluse]

Ah............ now this is interesting.

I'll check it out.

Thanks.

From what I've read, only extensions are incapable of usably blocking these trackers. A Pi-hole with lists blocking the suspect domains would suffice.

 

[SeriousHoax]

Ah............ now this is interesting.

I'll check it out.

Thanks.

There's also NextDNS that relies on filter lists like adblockers. You can choose almost any filter from their list. Since adguard dns's filter list is publicly available, it can do what adguard dns does and more like whitelisting, blacklisting, redirecting, a log of every dns request you make, etc. But you would have to configure the filter lists first while Adguard DNS is simpler. Just set and forget.

From what I've read, only extensions are incapable of usably blocking these trackers. A Pi-hole with lists blocking the suspect domains would suffice.

Actually this is not correct and actually the opposite. PiHole used to be based on the same Adblock syntax that extensions use and host based blocking but now they have stopped supporting Adblock syntax and supports only host based blocking so extensions are more powerful.

 

[oldschool]

Adguard DNS is simpler. Just set and forget.

True.

I tried Quad9 and they have no test page available yet. I'm not sure it was working and it didn't block anything. I'm back to Adguard because it's a no-brainer.