DNS

The Domain Name System (DNS) translates human-readable domain names (e.g., example.com) to IP addresses. By default, DNS queries are unencrypted, exposing browsing habits to network observers.

Privacy Implications

• Unencrypted DNS queries are visible to ISPs, enabling them to track visited domains and monetize user data (“making you the product”).
• HTTPS encrypts content (e.g., passwords, emails) but not DNS queries.

Encrypted DNS Solutions

• DNS over HTTPS (DoH) and DNS over TLS (DoT) encrypt DNS queries, preventing ISP tracking.
• Free, lightweight alternative to full VPNs for DNS privacy.
• Requires client-side configuration (e.g., in browser/OS) but no third-party trust.
• Cloudflare setup: Configured for encrypted DNS to enhance privacy and security.

Why VPNs Are Oversold

• VPNs encrypt all traffic but are often marketed as the “ultimate” privacy solution, despite being costly and requiring trust in a provider.
• Encrypted DNS solves the specific problem of DNS tracking without the overhead of a full VPN.

Reference: Encrypted dns dave garage (Dave’s Garage video: “Are You The Product? ISP Tracking vs VPNs vs Encrypted DNS”) Video link

Source Notes

• 2026-04-14: [[lab-notes/2026-04-14-Optimizing-AI-Costs-and-Privacy-with-Local-Open-Source-Models-and-Hybr|“But OpenClaw is expensive…“]]