this post was submitted on 07 Jun 2026
51 points (94.7% liked)
Privacy
48955 readers
401 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 6 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Sometimes I think that DNS providers could be, like NextDNS (I use them).
DNS providers can only see which sites you are visiting but not the actual content right?
I briefly used NextDNS but decided against using a DNS server tied to my email.
I wish there was a possible way to run an authoritative DNS yourself. The best I can do is a recursive server blah.
Yeah, that would be perfect. I thought some time ago about doing a DoT port -> nginx -> pihole -> unbound inside a cloud VM for the outside world , like this, but that would be too much work and maybe insecure.
You can tunnel your DNS requests via wireguard to your pihole server. If it has good bandwidth even the full traffic. Why would that be insecure?
Yeah, using a VPN would be good enough, but I want it to be open to the internet, without any port/config restriction, so I can access it from any device and anywhere, so the only remaining thing would be to host and open the port on a VM, only DoT and DoH, no :53 open (that would really be insecure, as DDoS insecure).