DNS Privacy

In this video, we’ll explain how DNS works, and how to set up your DNS to make your internet browsing far more private.

00:00 Intro
00:37 What is DNS?
01:09 How Does DNS Work?
07:02 Privacy Concerns
09:07 How to Protect DNS Queries
10:14 Quad9
13:50 How to Switch to Quad9
15:33 Conclusion

DNS privacy is a critical part of your home network security. Take 5 minutes to create more private DNS settings.

Special thanks to John Todd, Brent Cowing, Kieran Mesquita, and Alex Wied for their help with this video!

Brought to you by NBTV members: Lee Rennie, Sam Ettaro, Will Sandoval, and Naomi Brockwell.

To support NBTV, visit:
(tax-deductible in the US)

Visit our shop!

Our eBook "Beginner's Introduction To Privacy:

Beware of scammers, I will never give you a phone number or reach out to you with investment advice. I do not give investment advice.

Visit the NBTV website:

Watch this video on Odysee!

________________________________________________________________________
Here are a bunch of products I like and use. Using these links helps support the channel and future videos!

Recommended Books:

Beginner's Introduction To Privacy - Naomi Brockwell

Permanent Record - Edward Snowden

What has the government done to our money - Rothbard

Extreme Privacy - Michael Bazzel (The best privacy book I've ever read)

No Place to Hide: Edward Snowden, the NSA, and the U.S. Surveillance State - Glenn Greenwald

Some of my favorite products to help protect your privacy!

Faraday bag (signal stopping, to protect your fob, credit card, computer, and phone)

Data Blocker (if you're charging your phone in an unknown port, use this so that no data is transferred)

Camera tape (electrical tape is the best tape for covering phone and computer cameras)

USB-C to ethernet adapter:

Privacy Screens (use your phone and computer in public? Keep your information safe!)

Computer: (Search for the size right for your computer)

Phone: (Search for the size for your phone, decide whether you want glass or plastic!)

[toongurl]

That was the most clear explanation of recursion ever

[OcteractSG]

ISPs are tricky in general. An ISP can just collect the IP addresses their customers connect to and then use reverse DNS to find the domain names. Therefore, even DoT or DoH won’t fully solve the problem; they just create more work for ISPs that want to track people. Still, it’s better to not hand ISPs the data they want on a silver platter. I just wish DoT and DoH were options on operating systems. Endpoint OSes seem to be behind on adding those checkboxes.

[rolingpingu]

This video couldn't have come out at a more convenient type. I just found out yesterday that you can change your DNS address and that the one your ISP gives u is not necessarily the best

[WebVid]

This series is enormously helpful. Thank you so much!

[HornyGrandma]

This video may have just upscaled my sense of proprietorship over my own data and self reliance tenfold!!! THANK YOU NAOMI!!!

[lem]

I love how the exclamation of dns was put in this.. it made it so easy to understand it better

[natemarx]

Naomi’s uploads are safe for our souls.

[-iIIiiiiiIiiiiIIIiiIi-]

Every authoritative guest she has on a specific tech topic is an absolute hunk.

[Tony-rlfr]

Wow, TIMELY! Just installing pFsence + for the first time on an appliance. Definitely going to use this info to configure mine. Thank you!

[ALee-Acting-TV]

I have watched 1000s of hours of InfoSec CyberSec channels.. How have I not seen your channel! I'm so glad to have come across this channel.

[mrknaldhat]

Modern routers are getting powerful enough to be able to resolve DNS for the whole local network. I think manufacturers should make this available, especially for the not-so-techy majority of people. I've setup a local unbound+adguard setup, but what matters the most is not showing the ISP or the whole internet which addresses you are looking up. DNS over HTTPS, DNS over TLS, or DNS over QUIC should be standard.

[autohmae]

Always good to look at this topic, I'm glad people are doing this. Sadly we still have a long way to go to have proper security/privacy though.
11:03 most of authoritative servers (for the full domain) and run by the same organization which runs the website. So basically no privacy was gained.
16:00 next up is encryption of the TLS Server Name Indication (SNI).

[mspaint]

I always had no idea what DNS means or how it works. I still don't completely understand, but this video was extremely helpful, thanks

[TheNameOfJesus]

Excellent video once again, Naomi! Now the next big topic you should address is the SS7 network which is used by cell phones. SS7 is way scarier than DNS security. Some people might say, "But cell phones aren't computers and Naomi only does computer security." Actually, cell phones are computers these days, so they should also be examined. Please tackle SS7.

[flain]

This a a good informative video. Worth noting is that even if you prevent your DNS from being sniffed, all of the websites you visit - HTTPS or not can also be sniffed due to SNI / Certificate identification. For every HTTPS connection, there is plain text in the handshake, that your ISP (or dodgy VPN provider) can log that identifies which website/domain you are accessing.

[JesseScott]

I use quad9 and my connection seems faster and more secure.

[salto]

Very informative and good explained video. I switched to quad9 on my router yesterday away from my isp resolver. I also put pihole on my zimaboard and put that as my local dns server in my router to block ads and telemetry. I'll let that run for a bit and then I'll add unbound

[misaka]

Thank you that you told me about Quad9.

[peanut]

I love how almost all computer and internet processes are little quests. You can defiantly tell the type of people that developed the tech.

[KLiNoTweet]

Very helpful, have changed the settings. Works fine. Thanks and have a great day!