Mullvad’s FREE DNS over HTTPS service is a no-brainer for these reasons

[@Mas-Digital]

Hey Sun, thank you for everything you do regarding privacy. Every episode we learn something new. This YT channel is awesome!

[@sunknudsen]

Thanks for the push!

[@cjay2]

I think you'll find that Rob Braxman's channel is far more privacy-oriented than this one. 0:47 "similar to what Apple has been doing." Really? Apple and privacy? Just saying.

[@MyDogSteppedOnaBeee]

@@sunknudsen Hi Sun please do an updated Firefox settings video it's in the 120's now and some settings have changed and are additional

[@gumott]

Hey Sun, Long time fan here love your work. And I don't mean to be pushy in any way but I have waited so long to hear or see you do an episode on brave and what you think about it. It is fine if its not coming soon. Keep up the good work!

[@siddhartaghosh100]

Activated Mullvad Dns rightaway. Thanks ;)

[@sunknudsen]

Pleasure!

[@alexaka1]

Just wandering what do you think about other alternative DNS providers? NextDNS or Adguard for example. Adguard even supports a newer protocol, QUIC.

[@gumott]

wait for real???

[@beethovenhyppolite]

Any references to read about it?

[@SeanFisher]

Isn't NextDNS set in Delaware, US, which virtually guarantees no real privacy protection?

[@jefftam18]

@@SeanFisher i don't understand. I doubt they have the resource to keep a log of so many user

[@harman.s]

​@@SeanFisher You can choose to move your logs to EU and Switzerland or don't enable logs in the first place.

[@ieternalsyn]

I hecking love this guy!

[@avidwriter2882]

I'm not that paranoid about cookies and history, my PC doesn't leave my room. I just added the mullvad DNS to firefox alone. Thanks.

[@graphguy]

Doesn't Mullvad browser use this by default? The Mullvad Browser uses the Mullvad DNS service (without content blockers) by default.

[@unionse7en]

Good info, thanks. Interesting use of double negatives... "neither" & "nothing" ;-)

[@youtube-youtube721]

Let's say I use my ISP's DNS. I switch to Mullvad's DNS over HTTPS. My ISP still knows the domains I'm visiting because domains are not secured with SSL. So what's the point? Great content btw.

[@NeverSuspects]

ISP's can monitor everything you are doing IP wise on your connection, even encrypted traffic is addressed and can't be routed unless it can be read. DNS just translates your easy to remember address of a website to a IP address. So encrypt your actual transmitted information and just accept that the internet is based on addressing segmented information and routing it to that address and then resembling it. If you use a VPN with encryption your ISP knows you are but the actual IP and behavior is encrypted inside the addressed packets that can be read by the routers your ISP owns. People should just encrypt everything and avoid becoming interesting to anyone for connecting to address. Strange thing is many people forget or don't know that the internet was build on large corporate connections owned by the likes of At&t and such and these large networks get most of what goes onto the internet routed across their private networks and most of the internet is private, not public. It is a collection of networked private networks. You can't encrypt your routing information without an IP address pointing to a VPN server that translates all that encrypted routing information for you adding a whole extra layer of overhead. If you are really concerned about privacy stop using the internet and get rid of your smart devices as everything with a sensor and a network interface is collecting sensor data constantly and sending that data to some IP address.

[@quinoah_]

Hi there Sun. I'm really curious, what are your thoughts on Apple Silicon Macbooks? I've seen your why I use macOS video, where you mentioned "Macs are intel based...for now" Well, times have changed. What do you think?

[@sunknudsen]

I love my M1 MacBook Air from a performance perspective… that said, haven’t dug into the architecture from a privacy perspective… likely similar to Intel. Perhaps others can join conversation?

[@quinoah_]

Interesting. In the video, you spoke about running Linux through USB on a 2015 Mac. Have you managed to do the same on M1? If not, have you looked into Asahi Linux?

[@SmedleyButler1]

​@@sunknudsena few insosec guys say Linux is insecure bc of its boot kernel or something and that running "shut up windows" settings in a vm on Linux, then using a Chromebook, the a Mac are most secure ways for normies to use email and banking (though in separate profiles), 8m that order of most secure to most users friendly.... I forgot who all said that but at least 2. One was Good size British KZbinr that got his account hacked and a insosec guy told him....maybe Bradman also? He's peeing convincing email is the biggest danger. Any thoughts on that?

[@albaraa-bin-malek]

Why do you use Firefox and not Mullvad browser?

[@MyDogSteppedOnaBeee]

Hi Sun please do an updated Firefox settings video it's in the 120's now and some settings have changed and are additional

[@FruityHachi]

what about quad9? is it on par with mullvad or is mullvad the only dns provider to trust?

[@phototristan]

Quad9 is excellent but don't have the ad filtering that Mullvad encrypted DNS includes.

[@Claude-tj6ud]

I’m using AdGuard DNS. What’s your opinion on it ?

[@KerrBox92]

ok so i've done a bit with my privacy settings and can't seem to figure out how to enable dns over https and also, when i close firefox, yes everything is wiped clean and i need to re log back into everything, however some sites still have my past history once i log back in, any tips?

[@l0gic23]

Thoughts on splitting DNS from your VPN with Quad9?

[@sunknudsen]

Not sure that would significantly improve privacy given adversaries can likely reverse resolve IPs to domain names.

[@alex_saint-matthews]

3:27 “Ooh, that’s a bad word.”

[@rehangupta4024]

I did a connection check on the Mullvad site and it's all red. What should I do to rectify that?

[@ZenityStudios]

if its all red, you probably dont have it on. make sure you enable it

[@eliotcole]

100% on the cloudflare thing at the start.

[@HeyItsJace]

I discovered you because of that video!

[@nfavor]

What are the pros/cons of having an on-site recursive DNS server vs this?

[@michil75]

What about OpenDNS and parental filtering ? If you have suggestions, please comment.

[@XzERp1]

Isn't that an American company? I don't think anything more needs to be said about that:)

[@user-zr7kz4vs7c]

How about NextDNS?

[@XzERp1]

Isn't that an American company? I don't think anything more needs to be said about that:)

[@autohmae]

But why do you trust Mullvad ?

[@phototristan]

They are trustworthy. In fact authorities even once tried to raid them and left with nothing since they had no information stored.

[@deep_fried_chicken2836]

How would this compare to something like pi-hole with unbound?

[@nicolagrf]

what is and how to prevent Leaking WebRTC IPs? is it dangerous?

[@burhanbudak6041]

For sites like Teams, WhatsApp web, Telegram Web, Signal Web, Jitsi, WebRTC is necessary for VoIP and IM.

[@FlyingNacho]

Not related to the subject but, possible to link your wallpaper lol?

[@l0gic23]

Any thoughts on Private Internet Access (PIA)?

[@MarcusCarlisle-yk9gs]

Kinda crappy, get mullvad now

[@Mr.Mooody]

does it work in all countries?

[@J--Dubs]

Does this synergize well with adblocker extensions like ublock origin?

[@sunknudsen]

I believe DNS over HTTPS should not affect how ad blockers operate.

[@magicpoopfart8363]

They will still work, but things like Pi-Hole won't.

[@studio7tube]

​@@magicpoopfart8363 Would there be an advanatage if you use Mulvad in Pi-Hole?

[@_lun4r_]

I really don’t want to use this, Mullvad’s DNS is either slow or down which impairs your internet experience

[@spudseeker]

Maybe just an American thing. It normally doesn't work for me, but I went to the UK and it suddenly started working flawlessly

[@zakplays33333]

@@spudseekerthat’s probably because their dns servers are located in the uk you can see this if you use dnsleaktest

[@tc40390]

I just wanted to ask, why are you so stuck on using a proprietary os such as macOS if you're so deep into privacy and security? How can you trust Apple when they are doing a lot of shady things and whatnot? Wouldn't OpenBSD or perhaps QubesOS be a better alternative? Just curious.

[@sunknudsen]

Have you watched kzbin.info/www/bejne/bmXWdH-erpKlrZo episode?

[@jesus.christis.lord.foreve899]

hahaha ... ".... that is a us company ..." enough said Run for cover !

[@themadmallard]

DNS over HTTPS sound nice, but doesn't it still mean you have to trust that DNS in the same way as a VPN service based purely on their word? The DNS server would protect you from someone like your ISP, but not from that same DNS right? After all they still know your IP as the request... or am i misunderstanding?

[@blasiankxng]

if you don't know mullvad by now, I recommend doing some light research on who they are and their track record. that alone should provide a reason to trust them specifically, same goes for any other services.

[@themadmallard]

@@blasiankxng that's good, but not exactly what I asked. I was making sure that I understood the actual flow of the technology so that someone would correct me if i didn't

[@blasiankxng]

@@themadmallard your questions seemed more interested in trust than in how the technology works to me, I apologize. the dns provider is basically a middle man for traffic so your isp can't see what you're connecting to specifically, whether or not the provider has your IP stored is dependent on their security measures. as for "protect you from your ISP" that depends on your use case

[@themadmallard]

@@blasiankxng but, the DNS provider as a middle man would still have that access knowing both you and your in and out points, right? Trying to make sure I grasp it so i understand if its right for me.

[@blasiankxng]

@@themadmallard once again it depends on the provider, some encrypt the traffic so even they don't know, other don't or worse (sell the data to brokers/collectors)

[@Abdullah10O]

To be Honest with you, your videos are really boring to watch, it is helpful yes but i mean i get bored so easily try making a shortcut of your speech,

[@sunknudsen]

If you are bored, please don’t feel obliged to watch… other KZbinrs are likely a better fit.

[@Abdullah10O]

@Sun Knudsen sure, thanks for responding.

[@lovebaja]

You get bored very easily, don't you? Also, are you watching guides on DNS over HTTPS services to be entertained?

[@elosant2061]

@@Abdullah10O maybe you're just better off on tiktok or something tbh

[@Bruh-vp6qf]

Least dopamine deprived KZbin commenter

[@karlchilders5420]

uh, there are MANY DNS/HTPS providers other than Cloudflare...