search

DNSCrypt / dnscrypt-proxy

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
https://dnscrypt.info
ISC License
11.43k stars 1.01k forks source link

Suggestion: reword documentation surrounding bootstrap resolvers #2669

Closed mvevitsis closed 3 months ago

mvevitsis commented 3 months ago

Based on my interactions with the developer of inviZible, it seems that many do not understand that the bootstrap resolvers are not necessary if you use a stamp that includes the IP address for your server.

By removing/commenting out the bootstrap resolvers line (or setting them to loopback, null, 0.0.0.0, etc.) you can ensure that, even if for some reason you are unable to connect to your chosen resolver, the proxy will fail to connect instead of sending a request on port 53.

While this is a minor improvement in privacy/security, it's still worth mentioning, since on unrooted Android devices for example you cannot block port 53 (especially problematic for WWAN).

So my suggestion is to clarify with something like 'you can comment out this line or set these to an invalid address (e.g. 127.0.0.1:53) if you use a DNS stamp that already contains an IP address'

github-actions[bot] commented 3 months ago

This issue was automatically closed because it did not follow the issue template. We use the issue tracker exclusively for bug reports and feature additions that have been previously discussed. However, this issue appears to be a support request. Please use the discussion forums for support requests.