bjoernvold.com

The Domain name system /DNS) is the phone book of the Internet.
It translates ams15s22-in-x0e.1e100.net to Google and it does so openly without encryption in most cases,

So no matter how safe your Internet traffic is your provider can easily read, store and share your Internet history with anyone.

Now most Internet providers say that they do not do that and in any case they are exceptionally trustworthy....

So I have used DNScrypt for some time to prevent those trustworthy guys from reading my every internet surfing.

You will remember that lots of Facebook data landed in Cambridge - and the DNS would have been a great help there.

The problem is that some of the providers say that they do not store anything but we have no way of knowing if that is the case.

In comes Cloudflare with a new set of DNS that secures that you can use their name-servers and that nothing will be stored and logged.

Cloudflare has a history of promoting privacy but in principle this does not set them off from all the other providers that claim not to store anything.

But they have gone a step further and have engaged the Auditor KPMG to control and supervise that this is actually the case - that is as secure as it gets

Frankly, we don’t want to know what you do on the Internet—it’s none of our business—and we’ve taken the technical steps to ensure we can’t.

.

So drop Googles 8.8.8.8 and 8.8.4.4 and replace them with 1.1.1.1 and 1.0.0.1

In Linux you can enter the namservers directly in /etc/resolv.conf or enter the namservers in the Networkmanager,

https://1.1.1.1/

This is easier than implementing Dnscrypt - a project that is experiencing some problems these days...

Nice !!!

Yes they seem OK but it is not perfect.
Cloudflare will store data permanently including:

Aggregate List of All Domain Names Requested, and timestamp of first time requested

However they will remove your IP from these data and anonymize them.

All information collected by Cloudflare, no matter whether such information is part of Cloudflare’s temporary or permanent logs, will be cleansed of any personally identifiable data (including IP addresses). Additionally information that is stored as part of Cloudflare’s permanent logs will be further anonymized.

The good (and new) thing is that this will be audited so we are not simply left to trust them.

The main reason for concern is that Cloudflare is a US company and can be instructed and gagged as we have seen in several cases.
There is nothing Cloudflare can do about that and that makes them somewhat insecure despite all the good intentions.

The sad thing is that the US agencies have made it impossible to trust US Tech companies.

The Auditor -KPMG- is an international network that cannot be said to be under US control though.
In any case it is in the DNA of every Audit company to follow and audit according to each nations laws. If there are any laws that allow the US government to steal our private surfing data and to gag anybody with knowledge - then KPMG will be gagged too.

If you use Dnsmasq then you can add the DNS by adding:

to /etc/dnsmasq.conf
Remember to restart the service:


You can check that it works on https://dnsleaktest.com/

(Cloudflare with dnsmasq as cache is really fast)

done Thy

WOW. Cloudflare has a phone app, too! NICE! I wonder if it might help with battery drain at all. We'll see.

I think that's a constructive step towards the security of domains.

Results of the test from my phone. Since I'm not savvy on a lot of this, I need some 'splainin', please. I use Opera for the browser on my phone (not Mini), so I'm wondering if this is how it should be. This is while 1.1.1.1 is running. If it's not as it should be, please tell me what I need to do. Thanks!

I wonder if Opera comes with its own free VPN
Can you test in another browser?

Cloudflare DNSv4-Server: 1.1.1.1
Cloudflare DNSv4-Server: 1.0.0.1
For IPv4: 1.1.1.1, 1.0.0.1
IP6 Address: 2606:4700:4700:0:0:0:0:1111
IP6 Address: 2606:4700:4700:0:0:0:0:1001

viking60 wrote:I wonder if Opera comes with its own free VPN
Can you test in another browser?

Sure. Probably not a great choice, but I used Chrome this time. It found my ip right off when I went to the initial test page:


Then, I ran the test:

Test complete

Query round Progress... Servers found
1 ...... 5
IP Hostname ISP Country
68.114.47.34 none Spectrum United States
68.114.47.40 none Spectrum United States
68.114.47.39 none Spectrum United States
68.114.47.46 none Spectrum United States
68.114.47.41 none Spectrum United States

1.1.1.1 is in startup, and loads with my phone on reboot.