1

I was using DNSCrypt on my personal computer (linux). I uninstalled it, and now I'm getting errors reinstalling. I believe development on DNSCrypt was being abandoned anyway, because Cisco/OpenDNS bought it.

I was looking into BIND as a replacement for that, to choose my DNS and utilize DNSSEC. I want to be able to use DNSSEC providers (https://dnscrypt.info/public-servers/).

Am I wrong to think I can use this on my personal computer?

closed as off-topic by Xiong Chiamiov, forest, Serge Ballesta, Xander, Stephane Mar 12 '18 at 8:31

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • For a recursive caching nameserver, have a look at unbound instead of bind. It comes with everything needed for DNSSEC. Look at dnssec-trigger too (based on unbound) for hostile environments/ISP/DNS. – Patrick Mevzek Mar 9 '18 at 1:50
5

I was using DNSCrypt on my personal computer (linux). I uninstalled it, and now I'm getting errors reinstalling. I believe development on DNSCrypt was being abandoned anyway, because Cisco/OpenDNS bought it.

DNSCrypt is a protocol not a software. It has multiple implementations. The specific implementation you refer to is dnscrypt-proxy which was last updated 2 days ago. DNSCrypt is not related to OpenDNS.

I was looking into BIND as a replacement for that, to choose my DNS and utilize DNSSEC

Bind is not a replacement for DNSCrypt. DNSSec does not encrypt DNS but only adds signatures to provide an authenticated response. Signing in DNSSec is done by the owners of the domain (i.e. the authority) whereas with DNSCurve the signing is done by the DNSCurve server (which is not the authority for the domain).

I want to be able to use DNSSEC providers (https://dnscrypt.info/public-servers/).

There are no such thing as DNSSec providers. DNSSec simply works like normal DNS. Servers for the DNSCrypt protocol can not be used by normal DNS software.

  • 1
    I didn't realize dnscrypt-proxy was in version 2. Very happy you pointed that out. It looks like they definitely improved development and Linux availability. This is what I was looking for. – Lorax Mar 7 '18 at 15:05

Not the answer you're looking for? Browse other questions tagged or ask your own question.