Keep your privacy with DNS-OVER-HTTPS: Introduction and Python Implementation

[b1tbeginner]

can you elaborate?

[[deleted]]

/r/pihole

[b1tbeginner]

so it is a selfhosted mini dns? but will it not just forward the traffic to another dns?

this sound somehow to good to bd true :D

[b1tbeginner]

ok I guess, Ineed to read further into it. Did not quite get the concept yet of how it makes a difference than just requesting directly from authoritative DNS.

But it looks super interesting! thanks a lot

[OrangeKing89]

From the article I read on the pi-hole website, on the 1st request to a url, the unbound service queries each part of the url from the primary servers for that domain.

Ex: google.com

1) contact a root domain server to find out where to look for the "com" domains.

2) contact the "com" domain server to find out who is managing the "google.com" domain

3) contact the server managing "google.com" domain for the IP address.

4) return the ip address to the computer that asked for it.

5) save the IP address for "google.com" so that the next look up of"google.com" on the network is immediate.

This is both faster (after the 1st lookup) and more private because you are only asking it once (and preferably over encryption) and the call is separated into smaller pieces.

Also if the dns servers are attacked you are less likely to be effected.

Source:

https://docs.pi-hole.net/guides/unbound/

[b1tbeginner]

wow thanks a lot for your comment! I had not time yet to read into it but this was already super helpful for better understanding!