NextDNS Joins Firefox’s Trusted Recursive Resolver
This extreme focus on DoH is really concerning me.<p>If you&#x27;re worried about your recursive DNS resolver spying on you, the correct solution is to run your own recursive resolver.<p>I&#x27;ve been running unbound(8) on my OpenBSD systems at home for most of 2019, and (except for the time that I experimented with turning on strict DNSSEC checking) there hasn&#x27;t been even one time that it has caused me grief.  It was as simple as &quot;rcctl enable unbound&quot;.<p>And OpenBSD has recently introduced unwind(8), a dead-simple recursive resolver (using libunbound) that&#x27;s suitable for any system (even laptops that sometimes use broken Wifi access points or networks that block outbound port 53).<p>It is simply unacceptable for a modern operating system to lack its own recursive resolver.  By all means, allow the network administrator to configure the system to use a network-provided resolver if required, but the default ought to be an intelligent unwind(8)-style resolver provided by the OS itself.