GOGoblinSlayer·Dec 8, 2020
If they allow to configure DoH server, you can use https://github.com/DNSCrypt/dnscrypt-proxy
In Improving DNS Privacy with Oblivious DoHDNSCrypt
dnscrypt-proxy
Go2019–2025
DNSCrypt / dnscrypt-proxy
dnscrypt-proxy
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
22Distinct people
31Mentions
0Explicit recommenders
13.8KGitHub stars
What to know before exploring
What it is
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 7:02:50 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year31 dated mentions
Observed mentions: 2019-09-17 00:14:45 UTC to 2025-07-16 20:42:19 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 6 | 2 | 4 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 7 | 0 | 7 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 8 | 1 | 7 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 4 | 1 | 3 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 3 | 0 | 3 |
What Hacker News says
7 sourcesKey bits from the Cloudflare blog https://blog.cloudflare.com/oblivious-dns/
> The target [resolver] sees only the [DNS] query and the proxy’s IP address. The proxy has no visibility into the DNS messages, with no ability to identify, read, or modify either the query being sent by the client or the answer being returned by the target. Only the intended target [resolver] can read the content of the [DNS] query and produce a [DNS] response.
> The whole process begins with clients that encrypt their query for the target using HPKE. Clients obtain the target’s public key via DNS, where it is bundled into a [SVCB/HTTPS] HTTPS resource record and protected by DNSSEC.
> Clients transmit these encrypted queries to a proxy over an HTTPS connection. Upon receipt, the proxy forwards the query to the designated target. The target then decrypts the qu
Read the rest
ery, produces a response by sending the query to a recursive resolver such as 1.1.1.1, and then encrypts the response to the client. The encrypted query from the client contains encapsulated keying material from which targets derive the response encryption symmetric key.
> ...50% of the time ODoH queries are resolved in fewer than 228ms.
BTW, DNSCrypt supports "oblivious" encrypted DNS queries via what it calls Anonymized Relays https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-D...
Firefox DoH easily works with DNSCryptProxy.
https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Local-DoH
You can easily set it up to contact that, but enable some exclusions for specific domains if you wish to fallback to pihole.
It's probably not that efficient anyway to be using pihole's filtering in Firefox compared with just ublock origin anyway.
In Firefox 83 introduces HTTPS-Only ModeAlso see u/jedisct1's Anonymized DNS [0] which is works in a similar manner where the stub knows who's the client but doesn't know what's the query, and the resolver knows what's in the query-packet but doesn't know who the client is (kind of a DNS NAT?).
[0] https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-D...
In ODNS: Oblivious DNS (2018)I think ceasing to use your ISP provider's unencrypted DNS services will already bring quite some boost in privacy for the average internet user. That's why I recently switched to using DNSCrypt (https://github.com/DNSCrypt/dnscrypt-proxy) with one of the public providers listed here: https://dnscrypt.info/public-servers (pick one run by some university or internet activism organization).
In Mozilla VPNSome other blacklists here: https://github.com/dnscrypt/dnscrypt-proxy/wiki/Public-black...
Along with a script that aggregates data from multiple lists, removes duplicates/overlaps, whitelists, etc.
In All-in-One DNS block listFree software is suspicious?
I cannot endorse the app but it is made by dnscrypt-proxy enthusiasts. Had been removed from AppStore and brought back thanks to support of German incubator
https://techcultivation.org/#overview
https://github.com/DNSCrypt/dnscrypt-proxy/issues/42#issueco...
https://github.com/s-s/dnscloak
In “This is why I use ad blockers and a pi-hole server”