125
Warning: NextDNS causes major DNS leak
(lemmy.dbzer0.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 11 Nov 2026
125 points (98.4% liked)
Privacy
52018 readers
658 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 7 years ago
MODERATORS
NextDNS works when you are not at home.
I use Tailscale on my devices and my servers with pi hole so that I can set them as my dns no matter where I am. Works pretty well and lets me access my other self-hosted services as well.
I think I recall Tailscale being a Microslop product with big tech single sign-on options. Assuming I can get past the MS thing, can we use a regular id/password instead of logging in with big tech accounts?
You could sign in/sign up with your email vs single sign on. I used an alias when I registered. That was some time ago so I’m not sure that’s still an option. I haven’t confirmed.
As far as I can tell, they are not a Microsoft product.
I use an email alias and regular password, they don't require phone number or pii
I’m not sure about the MS (which I hate as the next guy), but the point is, it’s what works. You can replace Tailscale with Headscale or NetBird, or even just WireGuard.
The last time I checked, it was not possible for some stupid reasons. I am trying to reduce reliance on them as well as I think its gonna get enshitified soon.
I was excited about it until I investigated further. I'll just do it the hardway - not knowing what I'm doing and spending way too ling a screwing it up before getting it right.
Is it true that Tailscale logs all of your IP addresses and usage timestamps?
It does. It is needed for the services provided inside the console where you manage your mesh. What they cannot see is what you’re actually doing, the content. If you don’t need the services that require that info, then Tailscale is probably more than you need and there are simpler (not easier) solutions.
I was wondering if I could partition my phone and run it, but I don't want to risk screwing it up.
So does my pihole. You should never trust your ISPs firewall/modem/router, never ever. You should have a hardware firewall/router and than you can set up a VPN into your LAN.
Some ISPs require you to use their router, and their router may not be configurable to support custom DNS or VPN access. For users in that situation third-party DNS can make sense.
Looks like in this case our third party DNS could be compromised. Who knows if they sold our info or not? Third party DNS is the solution with no notice that service no longer works the same.
I'm about to set up Pi Hole with Unbound. F all this.
You won’t regret the move to Pi Hole. It can help protect you while you are figuring everything else out. It’s a long journey and doesn’t need to be perfect all at once. You’ll make mistakes along the way and once trusted providers will enshittify so it will always be a work in progress.
Agreed. Best way to avoid enshittification is to host it ourselves.