0

I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't very hard. As such is there any advantage to enabling one the the Encrypted DNS protocols on the server - would that work and if so, how would I go about doing it?

Improve this question
3
  • 1
    Even if thousands of people were using the server, attribution would not be hard because IP:port combinations are unique (this is how NAT works).
    – forest
    May 2, 2018 at 12:25
  • @forest true, but how does that apply here?
    – multithr3at3d
    May 2, 2018 at 13:58
  • @multithr3at3d I was just pointing it out, since OP seems concerned about attribution.
    – forest
    May 3, 2018 at 0:12

1 Answer 1

Reset to default
1

I would strongly recommend using DNSCrypt and DNSSec directly on your client PC. There is no reason I can see to shift this to your VPN server, and it is probably a lot harder to set up. If you however for some reason have clients using your VPN, that would not be able/not know how to set these up themselves, then this may be worthwhile.

Improve this answer
2
  • 1
    Although to do it on the VPN server, you'd have to install a DNS server on the there and force the clients to use it.
    – multithr3at3d
    May 2, 2018 at 13:58
  • @multithr3at3d Exactly. I did not go to the details of setting it up both because I don't know much about it and because it is a bit out of scope for this question. It would deserve a separate one on different SE.
    – Peter Harmann
    May 2, 2018 at 14:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .