I have home network set up to use piHole and piHole uses 1.1.1.1 and 8.8.8.8 as DNS resolvers. This, however, doesn't prevent ISP snooping on my DNS traffic, as DNS traffic is UDP unencrypted, as I understand it. What measures can I implement to make my internet traffic safer from ISP snooping?
3
-
One word: HTTPS– security_paranoidCommented Jun 8 at 0:39
-
Or use a vpn or configure proxy chains for your router if you can be bothered.– security_paranoidCommented Jun 8 at 0:58
-
Does this answer your question? How to hide dns requests from ISP?, How does DNS over TLS prevent your ISP from seeing the websites you visit?.– Steffen UllrichCommented Jun 8 at 4:21
Add a comment
|
1 Answer
You can use DNS over TLS or DNS over HTTPS to encrypt the DNS queries and responses.
Note that this does not prevent the ISP from seeing the IP addresses which you connect to. Depending on the number of websites served from the addresses, it can be easy to pinpoint the exact website you're visiting. To avoid this as well, you have to use a VPN, a proxy or something like Tor.
-
It also does not prevent the ISP from seeing the TLS SNI which contains the site name anyway. Commented Jun 19 at 2:57