DNSCrypt VS Plain DNS
What is DNS? DNS is a Domain Name Service, which is widely used by everyone today. If you don’t know if you are using DNS then this article is not for you.
DNS is used to resolve human-readable domain names to machine-readable addresses. Actually, for servers on the Internet it is not important if your side has a neat and short name or not, it even doesn’t mind to have ugly IP addresses like 19.5.81.65 and not the 1.1.1.1 – for example. By the way, 1.1.1.1 – is a really working DNS server address of CloudFlare and it supports all the protocols: DNS, DNSCrypt, DNS-Over-TLS, DNS-Over-HTTPS.
So, in order to know the IP address of some server on the Internet by domain name the DNS servers are used. Your browser asks DNS server the question like: “What is the IPv4 address of www.google.com” and the DNS server responds “The IPv4 address of www.google.com is 123.456.789.123”. Of course it is not a real IP, the real IP can’t contain numbers larger than 255 because it need to be exactly 1 byte. So, in this routine anyone who sniffs on your wired/wireless connection can see that you are visiting “google.com”. DNSCrypt protocol is here in order to encrypt this information and nobody beetween your PC and the destination resource will be able to sniff your domain requests.
The objective of this article
- Install your own DNSCrypt v2 forwarder (v1 is supported too) ( we will use dnsdist package)
- Install DNSCrypt client for Windows
- Install DNSCrypt client for Android
Note: the article was written in English. Switch to English to disable automatic translation.
Read the article further to see all the tutorial.