Cloudflare rolls out 1.1.1.1 DNS resolver with TLS/HTTPS support

I promised myself I wouldn’t believe anything I read today, but fortunately I’m going back on this commitment to let you know about the new 1.1.1.1 DNS service that Cloudflare has just rolled out. Obviously this isn’t the first public DNS service that provides a mechanism to work around your ISP’s poor DNS resolution; Google’s 8.8.8.8 and the “Quad9” 9.9.9.9 also exist. In addition to standard DNS resolution over UDP 53, it also support TLS and HTTPS based transport. Hopefully, now that someone besides Google (who was first with TLS/HTTPS DNS), we will see this coming to consumer routers and alternate LAN DNS forwarders.

Unfortunately, by default, DNS is usually slow and insecure. Your ISP, and anyone else listening in on the Internet, can see every site you visit and every app you use — even if their content is encrypted. Creepily, some DNS providers sell data about your Internet activity or use it target you with ads.

We think that’s gross. If you do too, now there’s an alternative: 1.1.1.1

1.1.1.1 | Cloudflare