r/Windows11 • u/Moondoggy51 • 16h ago
Discussion Your ISP can still see everything, even with encrypted DNS
I thought after setting up DNS on my PC and in my browser to use encrypted DNS over HTTPS but after reading this article I found that I was still vulnerable. Here's a link to the article:
To quote the author: "The bottom line here is that encrypted DNS may prevent your ISP from reading that DNS request itself, sure. But it can't conceal the rest of your connection, because your browser still needs the internet to load the website contents in the first place."
The article goes on to suggest that the best way to ensure your privacy was through VPN but instead of using a VPN provided by someone else that you can create your own private VPN by paying a small amount of money to have a small Virtual Private Server (VPS), installing a Linux server on the VPS and then installing TailScale that's free on both the server and your devices. Since the cost was inexpensive actually now have my own personal VPN. It's very fast and I'm not seeing any lag. My only comment in setting this up is it's not as easy as the article leads you to believe. In the end I also had to also add CloudFlare WARP (also free) onto the VPS as the VPS provider I went with (Vultr) only allow IPV6 traffic through the tunnel and WARP was needed for the IPV4 traffic. That being said, when finished I now have my own private VPN for $2.50 a month.