Encrypt all the things!

You are reading a single comment by @Velocio and its replies. Click here to read the full conversation.

•

hippy in reply to @Velocio

Must be able to run DNS-over-TLS and DNS-over-HTTPS... which Pi-Hole doesn't do yet (as dnsmasq doesn't support it and they're not using knot or kresd).

https://docs.pi-hole.net/guides/dns-over-https/

https://scotthelme.co.uk/securing-dns-across-all-of-my-devices-with-pihole-dns-over-https-1-1-1-1/

?

•

Velocio in reply to @hippy

Yeah, but they don't yet do DNS-over-TLS which is what Android 9+ considers "Private DNS" and allows you to define DNS servers without needing a VPN app.

DNS-over-HTTPS takes care of "how will I get my home Pi-Hole replicating my internet Pi-Hole without UDP port 53", and DNS-over-TLS takes care of "how will I get my internet devices securely getting DNS from my internet Pi-Hole".

So what I'm seeking to achieve is that the internet one is my primary Pi-Hole, and my home one is a secondary (reading from the primary but also cloning config should the primary be down).

•

hippy in reply to @Velocio

Yeah, I kinda glazed over when it came to that stuff.

What we need is our own ISP...

About

Avatar for Velocio @Velocio started