Even with doh set up, your computer reaches out to a dns server and trusts that server is what it claims to be. There are reasons and history that explain this behavior but there are also attacks that take advantage of it. Dnssec performs cryptographic identity verification to make sure you are asking the real dns server where Pornhub.com is as opposed to some on the wire or in the cloud interlocutor that might direct you to a website that looks alike or just sends you somewhere else entirely.
Please read the following in the voice of Glenda the good witch from the wizard of oz, or SpongeBob, or some other character who is on your side and would never say something mean to hurt your feelings, because I am on your side and would never say something mean with the intention of hurting your feelings:
A person who benefits from this kind of explanation would be best served by mullvad over any other vpn because it is much harder to misconfigure mullvad in a way that undoes your privacy goals.
Please do me the kindness of again reading this in the most sincere and respectful voice:
It’s best to put your privacy and safety needs above the possible results of a tiny fraction of the money you spend going to a foreign party you dislike.
Doh and dnssec will probably be good enough till you can sock back $20 to mail to Sweden.
interesting examples 😭
i think i have it enabled on my pcs browser (librewolf) and my phones browser (ironfox)
Make sure you also have dnssec set up.
Even with doh set up, your computer reaches out to a dns server and trusts that server is what it claims to be. There are reasons and history that explain this behavior but there are also attacks that take advantage of it. Dnssec performs cryptographic identity verification to make sure you are asking the real dns server where Pornhub.com is as opposed to some on the wire or in the cloud interlocutor that might direct you to a website that looks alike or just sends you somewhere else entirely.
Please read the following in the voice of Glenda the good witch from the wizard of oz, or SpongeBob, or some other character who is on your side and would never say something mean to hurt your feelings, because I am on your side and would never say something mean with the intention of hurting your feelings:
A person who benefits from this kind of explanation would be best served by mullvad over any other vpn because it is much harder to misconfigure mullvad in a way that undoes your privacy goals.
that is true BUT im broke so i cant pay for a vpn rn, AND mullvads ceo has been a naughty boy 😔
Please do me the kindness of again reading this in the most sincere and respectful voice:
It’s best to put your privacy and safety needs above the possible results of a tiny fraction of the money you spend going to a foreign party you dislike.
Doh and dnssec will probably be good enough till you can sock back $20 to mail to Sweden.