Lesson 9 +15 XP

Secure DNS (DoH/DoT) & Tracker Blocking

Reclaiming Your Browsing Privacy

When you type google.com, your computer queries a DNS (Domain Name System) server to look up the IP address.

Traditional DNS is Unencrypted

By default, standard DNS queries are sent in plain text. Your ISP logs every single domain you look up, building a detailed profile of your daily habits.

Encrypted DNS Protocols

  • DNS over HTTPS (DoH): Wraps DNS queries inside standard HTTPS traffic.
  • DNS over TLS (DoT): Encrypts DNS queries on a dedicated secure port.

Popular Privacy DNS Providers: Quad9 (9.9.9.9), Cloudflare (1.1.1.1), NextDNS, Control D.

Blocking Trackers & Ads

  • uBlock Origin: The gold-standard, open-source content blocker extension for Firefox/Brave/Chrome.
  • Pi-hole / AdGuard Home: Network-wide DNS sinkholes that block trackers and ad domains across every device in your home!