- Cloudflare DNS
- Adguard DNS
- Google DNS
I initially tried using DNS.Watch, but their performance was sub-par. Then I switched to Cloudfare (after finding a fix for archive.is) since it seems like a better option than letting Google get even more info on me.
buy an sbc and run pi-hole+unbound+dnssec at home
There are important options missing. I use the DNS servers of Digitalcourage and SecureDNS. Both with dns over tls.
dnscrypt for me…
These are the most popular services that I’m listing. It would start to become too long of a list if I added more.
Well there are services that are DNSCrypt compatible, DNSCrypt in itself is a protocol.
which DNS provider? I cannot decide!
…so I use 36 of them on random rotate, using dnscrypt-proxy including DNS provided from opennic, quad9, and other public resolvers that state: No filter and No log, otherwise dnscrypt or DoH only, and dnssec. oh, I block IPv6 systemwide, otherwise would be 48+ resolvers to work with those settings.
(edit to add: some links to yetanotherworldofchoices:
https://github.com/jedisct1/dnscrypt-proxy/wiki/DNS-server-sources (see also dnscrypt-proxy for info on that)
https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Public+Resolvers (see also stubby, another option for dnscrypting)