Even with doh set up, your computer reaches out to a dns server and trusts that server is what it claims to be. There are reasons and history that explain this behavior but there are also attacks that take advantage of it. Dnssec performs cryptographic identity verification to make sure you are asking the real dns server where Pornhub.com is as opposed to some on the wire or in the cloud interlocutor that might direct you to a website that looks alike or just sends you somewhere else entirely.
Please read the following in the voice of Glenda the good witch from the wizard of oz, or SpongeBob, or some other character who is on your side and would never say something mean to hurt your feelings, because I am on your side and would never say something mean with the intention of hurting your feelings:
A person who benefits from this kind of explanation would be best served by mullvad over any other vpn because it is much harder to misconfigure mullvad in a way that undoes your privacy goals.
interesting examples 😭
i think i have it enabled on my pcs browser (librewolf) and my phones browser (ironfox)
Make sure you also have dnssec set up.
Even with doh set up, your computer reaches out to a dns server and trusts that server is what it claims to be. There are reasons and history that explain this behavior but there are also attacks that take advantage of it. Dnssec performs cryptographic identity verification to make sure you are asking the real dns server where Pornhub.com is as opposed to some on the wire or in the cloud interlocutor that might direct you to a website that looks alike or just sends you somewhere else entirely.
Please read the following in the voice of Glenda the good witch from the wizard of oz, or SpongeBob, or some other character who is on your side and would never say something mean to hurt your feelings, because I am on your side and would never say something mean with the intention of hurting your feelings:
A person who benefits from this kind of explanation would be best served by mullvad over any other vpn because it is much harder to misconfigure mullvad in a way that undoes your privacy goals.