2y ago

DoH vs DNScrypt

Hi guys,

I was searching which protocol is better for privacy and so far DNScrypt is better (according to my research).

What’s your opinion?

15 comments

You have a comparison with other protocols here
https://dnscrypt.info/faq
I've never heard of DNSCrypt. What supposedly makes it better? DoH works fine and is the best way to "hide" DNS traffic as far as I can tell.
- check this https://dnscrypt.info/faq/
From my research DNS crypt is the better option since DNS queries can be anonymized. In terms of privacy this is next level.
- They want people to use easily tracked TCP. UDP is a simple request, TCP has to establish the connection, QUIC by Google is even worse.
  None of this makes sense (except maybe that TCP is stateful). What "easily tracked" is supposed to mean here I have no idea. Any information you can get from TCP are included in UDP from a privacy standpoint. The concept of a request doesn't exist in UDP. The actual request in the DNS sense is very similar for all protocols. QUIC is UDP from a network protocol point of view, but it adds features commonly found in clients that need secure connections over UDP.
  I prefer DoT
  Which uses TCP.
- DoH is better than DoT imo because it is not distinguishable from HTTPS traffic by an outsider and thus harder to block/mess with.
- QUIC uses UDP?
- Why you prefer TLS?
- Well you can still use DNScrypt servers

15 comments