Host Your Own Encrypted DNS Server

In this video I teach you how to Host your own Encrypted DNS (DoH) server on a Vultr VPS

Use my affiliate link to get yourself a Vultr VPS, please and thank you

My merch is available at

₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿

Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436

Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV

Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079

Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

[MentalOutlaw]

Use this link to get yourself a Vultr VPS
Use this link to get the little daemon T shirt (also available in long sleeve, pullover hoodie, and ladies shirts)

[njpme]

Blink 2 times if you're ok. 3 times if the NSA is holding you hostage

[dueeek]

Love the Windows XP style theme! Also, yet another high quality video from you, thanks for being awesome man!

[Teddev]

Love your channel man! We need people like you who care about privacy and freedom in this crazy digital world!

[noctisumbra]

Merry christmas Kenny, and hopefully a happy new year :^)

[hanelyp]

The limit I see to privacy in this setup is it still depends on upstream DNS, and your private server may still be traced to you. To improve this you need your private DNS open for wider use, hence ambiguity of who is requesting a lookup.

[cyberdusttv]

My limited understanding with DNS is that when one does a recursive DNS query, the queried DNS server needs to check the root server first, which eventually tells the DNS server what IP it is searching for. If this is hosted locally, only the local connection to the queried DNS server would be protected by DoH, and the DNS server making the actual query would be in plaintext still. Wouldn't it be actually worse than using a VPS, if you consider the ISP as a bad actor in the proposed threat model, since they can just read the outgoing traffic of the DNS server?

[noanyobiseniss]

Not just privacy but also speed when held locally.
Add you frequently visited sites to your local hosts file for snappier surfing.

[MrTechguy]

Important thing to note!
You should not run a UDP based DNS Server publicly accessible.
This can be used for DNS amplification attacks. Either move your DNS to a VPN (with headscale for example) or only allow HTTPS requests.

[fildisco]

Merry TLS 1.3 Christmas Mental Outlaw and have a happy DNSSEC New Year!! :D

[turtleswithbombs]

Just learned about DNS leaks today! On an unrelated note, u should drop a tutorial on removing rogue-deepfake AIs from my walls

[beydb]

thank you for taking time off playing for the boston celtics to bring us this video

[specthegod]

I havent even watched the video yet... just logged in to give it an instant LIKE and thank you Kenny for always having our back. In a world where Governments and large Companies want to invade and completely STRIP us of everything when it comes to privacy... I truely hope for the new year 2024, a voice like your will continue be a light for us non-tech-savy to ensure that our privacy is protected and not SOLD or invaded. I wish you a happy New Year in advance🌹🤝 🌹 All the best. PS: I WISH there was a way to DM you regarding something... do hint me in the right direction if possible.

[harveybolton]

There are some things it makes sense to host yourself but recursive DNS isn't one of them, you're isolating your queries to a single VPS in the cloud with no upstream anonymity. You're much better off using an on-premise DNS cache/filter like Adguard/Pihole and configuring it to use a privacy aware upstream DNS service like Quad9, over DoH of course. Route your queries over Mullvad if you're extra paranoid but that's overkill and not necessary for 99% of threat models.

[autohmae]

putting your recursive nameserver locally will NOT solve the DNS-information leak, because at the moment still all DNS-requests done recursive nameservers are still NOT encrypted. Sadly.

[kidus_tv]

Great video as always. If only DNS was real.

[chrisphoenix]

Mental Outlaw is a white guy from Boston.

[OcteractSG]

So it’s the most private DNS setup, even though the DNS server can be identified as yours, it talks to other DNS servers in the clear (because that’s how top-level DNS works), and you’re the only person/family using it.

[babelboy-akababz]

04:50 I was bloody jamming to that music. Why did it have to stop. I want to live my life with that soundtrack running.

[ThatRandomGuyInTheComments]

Holy shit that thumbnail what the fuck