[Solved] encrypted dns, what to choose and how to setup

[crisp locust]

i used systemd resolver but i read smwhere that its not that safe as it fallbacks to unencrypted dns

[zealous cobalt]

you can configure it to use encrypted dns

in /etc/systemd/resolved.conf

[swift rock]

generally use dnscrypt-proxy for this... it is one of the older encrypted dns clients but has been updated and handles it neatly while supporting DoT and DoH

on top of supporting the old dnscrypt

alternatively firefox has built in support for encrypted dns that you can configure making that firefox profile never stop using encrypted dns

[crisp locust]

ok let me try this

can u share ur setting

[swift rock]

not really... just copy the default config and configure it from there

[crisp locust]

ok