☹️

How so? I’m using unbound locally for recursive DNS, but I’ll checkout what DNSCrypt adds since it seems like local encrypted DNS to the recursive servers.

Wouldn’t ECH still work with this setup and this setup be more secure since you’re not handing off your DNS requests to some other company?

Yeah I think it has the same limitations that pretty much anything not through a vpn has because you still have to tell your isp where to send the data. Your isp will still see some things, even if it’s encrypted (metadata, DPI, habits, and things beyond my knowledge). This sounds like a step in the right direction for the majority of people though, even if it’s minor.

I kind of see it like differentiating between them seeing lemmy.ml via this vs lemmy.ml/thing-i-want-private/peronal.html without it, but I could be wrong about that.

Does this rely on DOH? Seems like if I’m running my own recursive DNS that this won’t apply to me.

lol you’re right. I misread that, my bad.

For now