I responded to someone in comments on a post that may not get as much visibility, and wanted to share something that might help some others who are newer to this.
I referenced Quad9 DNS as probably one of the best private DNS you can use, Swiss based, no log, no tracking, no data to sell, etc. They also implement DNSSEC, DoH, DoT, QUIC, ECS (which you may or may bot want), malware blocking, content filtering, and maybe something else I’m forgetting.
Many DNS sinkhole apps, OSes, or systems can actually utilize Quad9 for your resolver while those systems also block ads. Below is my functional list of systems that I’m aware of, though I haven’t tested everything. I believe all are considered FOSS, too. If you don’t have a spare Raspberry Pi laying around, try running in HomeAssistant, Yunohost, ZimaOS (previously CasaOS), or others.
DNS sinkhole (Adblocking) apps:
Feel free to comment and add your own I’m maybe not aware of. I’m no software engineer, but I can read through some code, though not an expert, nor have combed through these personally. Usually I’ve tested/run at the recommendation of others over the years before my ban on Reddit (for shitting on AI).
Hope this helps!!
Fair enough. I love the spirit of your intent. But we’re already wildly self-selecting for people versed in any level of opsec by just assuming they know how to SSH into a headless Pi if something goes wonky, plus know *NIX terminal commands.
I would say that for general users, switching to Firefox and getting uBO is enough. That much is very easily done by the layperson (and honestly would be sufficient for people looking at cat photos and reading email). From there, we veer off into needing technical skills.
Touche. Though, I’ll admit I use VNC to access my pi, not SSH. I’m not a terminal fan if I can help it. I mean, I guess I still use terminal once in, so, maybe I should use ssh. Hmm. I never gave it too much thought.