[{"content":"Overview Every connection your device makes starts with a DNS lookup. The resolver that answers it sees the name of every site and service you use, decides how quickly you get an answer, and can decide whether you get an answer at all. Most people never choose one; they use whatever their ISP or network hands out. That is a reasonable default, but it is still a choice, and it is worth knowing what you are trusting the resolver with.\nThis post is about how to evaluate a resolver, not which one to pick. The questions below apply to your ISP\u0026rsquo;s resolver, to a public one, and to one you run yourself.\nWhat a resolver knows A recursive resolver receives the full name you are looking up, together with your IP address, for every lookup your device makes. Over a day that is a complete list of the sites, apps and background services you used, with timestamps. Whether that record is kept, for how long, and who can see it is the first thing to find out. Read the privacy policy for the words log, retain and share, and notice what it does not say.\nThe resolver also knows your approximate location from your IP address, and some forward a truncated form of it to authoritative servers to pick a nearby content server. That is a trade-off between speed and privacy that you should at least be aware of.\nWhat to look at Logging and retention. Does the operator keep query logs at all? If so, for how long, and are they tied to your IP address? A clear statement beats a vague one.\nBusiness model. Running a resolver costs money. If you are not paying, understand what is. Advertising, data sales and \u0026ldquo;security intelligence\u0026rdquo; products all depend on query data.\nFiltering. Some resolvers block advertising, tracking, malware or adult content by returning no answer for those names. This can be exactly what you want. It also means the operator decides what you cannot reach, so look for a published policy on how the lists are built and how to report mistakes.\nEncrypted transport. Plain DNS travels in clear text, so anyone on the path can read or alter it. DNS over TLS and DNS over HTTPS encrypt the connection between your device and the resolver. Most current operating systems support at least one of them; check that the resolver does too.\nDNSSEC validation. A validating resolver checks the signatures on signed zones and refuses forged answers. It does not protect privacy, but it protects integrity.\nSpeed and reliability. Latency is set mostly by distance to the nearest resolver node and by how warm its cache is. Measure it from where you actually are rather than trusting a benchmark from somewhere else. Anycast networks with many nodes tend to be both fast and resilient.\nJurisdiction. Where the operator is incorporated and where the servers run determine which laws apply to your query data.\nReversibility. Changing resolvers should be a few fields in your network settings, and clearing them should put you back on the default. Avoid anything that requires an agent or app for a basic resolver change.\nHow to check what you are using It is common to configure a resolver and still be using a different one, because a VPN, a router, or an operating system feature took over. Two quick checks:\nMy IP Address shows the public IPv4 and IPv6 addresses your traffic leaves from. My Resolvers shows which resolvers are actually answering your lookups, which is the only way to know whether your configuration took effect. From a terminal, dig or nslookup against a specific server tells you what that server answers, and comparing it with a lookup that uses your system default tells you whether they agree:\ndig example.com +short dig @203.0.113.53 example.com +short References RFC 1034 and RFC 1035, the DNS specification RFC 7858, DNS over TLS RFC 8484, DNS over HTTPS RFC 7871, EDNS Client Subnet, the mechanism that forwards part of your address to authoritative servers IANA root servers","date":"2024-01-05","description":"What a recursive resolver actually does for you, and what to look at before you point your devices at one","section":"blog","title":"Choosing a DNS resolver","url":"/blog/choosing-dns-provider/"},{"content":"Upgrade your internet experience.\nWhat is it? NXDOMAIN is an ad-blocking DNS service. The aim is to protect privacy and anonymity for internet users. Ad blocking helps thwart behaviors such as user tracking and targeted advertising.\nThe service is FREE and requires no sign-up or commitment of any kind.\nTry for yourself Configure your mobile or desktop device in seconds.\nOpen your device network settings Locate the DNS name server fields Enter the server IP addresses for DNS1 and DNS2 To revert the network configuration changes simply clear the DNS name server fields.\nSwitching DNS providers If you change DNS settings often it might make sense to use a VPN profile with automatic DNS configuration. VPN provides an additional layer of privacy and security, and the VPN profile can automatically set your DNS servers while connected. In such a setup, while connected to the VPN you utilize a secure traffic tunnel with ad-blocking DNS, and you simply disconnect from the VPN to disable the secure tunnel and revert to default DNS settings.","date":"","description":"NXDOMAIN","section":"","title":"About","url":"/about/"},{"content":"Last Updated: 2024-01-10\n1. Introduction This Cookie Policy explains how NXDOMAIN (\u0026ldquo;we,\u0026rdquo; \u0026ldquo;us,\u0026rdquo; or \u0026ldquo;our\u0026rdquo;) uses cookies and similar technologies when you visit our website nxdomain.co (the \u0026ldquo;Website\u0026rdquo;). By using the Website, you consent to the use of cookies as described in this policy.\n2. What Are Cookies? Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work or to work more efficiently, as well as to provide information to the owners of the site.\n3. Types of Cookies We Use We use the following types of cookies on our Website:\nEssential Cookies: These cookies are necessary for the proper functioning of the Website. They enable you to navigate the site and use its features.\nAnalytical/Performance Cookies: These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us improve the way our Website works, for example, by ensuring that users find what they are looking for easily.\nFunctionality Cookies: These cookies are used to recognize you when you return to our Website. This enables us to personalize our content for you and remember your preferences.\n4. Your Consent By using our Website, you consent to the use of the cookies described in this policy. If you do not consent to the use of these cookies, please disable them following the instructions provided in this policy or by changing your browser settings.\n5. How to Disable Cookies Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may impair your overall user experience.\n6. Changes to This Cookie Policy We may update this Cookie Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this policy periodically.\n7. Contact Us If you have any questions about our use of cookies or this Cookie Policy, please contact us at info@nxdomain.co.","date":"","description":"","section":"legal","title":"Cookie Policy","url":"/legal/cookies/"},{"content":"placeholder.","date":"","description":"","section":"legal","title":"Privacy Policy","url":"/legal/privacy/"}]