[General Questions and Answers] xXx yYy:
A:

Private DNS server vs. Private DNS mode

Private DNS servers:These are custom DNS servers operated by a company or organization, separate from the public DNS servers typically provided by your internet service provider (ISP). Using a private DNS server can offer some security benefits, such as:

Encryption: Some private DNS servers encrypt your DNS queries, making it more difficult for someone to snoop on your browsing activity. This is done using protocols like DNS over HTTPS (DoH) or DNS over TLS (DoT).

Content filtering: Organizations can use private DNS servers to filter out malicious websites or block access to certain types of content.

Private DNS mode: This is a setting on some mobile devices (introduced in Android 9.0) and allows you to use a custom DNS server of your choice instead of the one provided by your ISP. This offers the same benefits mentioned above for private DNS servers.

In essence, private DNS allows you to choose which DNS server your device uses to translate website names into IP addresses, and it can also encrypt those communications for added security.

B:

Here is a list of my favorite DNS over TLS supported providers/servers:

Cloudflare - based in San Francisco, California, U.S., isn't based in a single location, actually it houses 310 servers in 120 countries.

one.one.one.one

1dot1dot1dot1.cloudflare-dns.com

Google - isn't based in a single location . When you connect to Google Public DNS using an IP address like 8.8.8.8, anycast routing technology comes into play. This clever routing method directs your request to the nearest Google data center with a Public DNS server, regardless of its physical location. It's suggested that Google's data centers house millions of servers in total.

dns.google

Quad9 - based in Zürich, Switzerland

dns.quad9.net

Adguard - headquartered in Limassol, Cyprus

dns.adguard.com

dns-family.adguard.com

CleanBrowsing - a U.S.-based, global company

adult-filter-dns.cleanbrowsing.org

family-filter-dns.cleanbrowsing.org

security-filter-dns.cleanbrowsing.org

C:

Benefits of using Private DNS (Can be real):

Improved Security: Private DNS providers can offer features like protection from malware and phishing attempts. Encryption (DoH/DoT) helps shield your browsing activity from snooping.

Enhanced Performance: Some private DNS services boast faster loading times for websites by using geographically optimized servers or caching frequently accessed data.

Privacy Focus: Private DNS allows you to potentially choose a provider with a stricter logging policy compared to your ISP's public DNS server. Encryption further obfuscates the specific websites you visit.

Potential Drawbacks to Consider:

Limited Impact on Speed: The actual performance improvements from private DNS might be negligible for most users with decent internet connections.

Uncertain Logging Practices: While some private DNS providers might be more privacy-conscious, it's crucial to check their policy to understand what data they log (if any). The core function of a DNS server, even a private one, is to translate domain names into IP addresses. Many DNS providers, especially free ones, may keep logs of your queries to improve their service or for other purposes (check their privacy policy).

Your device settings: Some devices, like Android versions starting from 9, offer Private DNS with options to encrypt queries (DoH or DoT). Encryption makes it harder to see the actual domain names requested, but the provider might still log some metadata about the connection.

D:

How do private DNS companies finance themselves?​

Private DNS companies employ a few different methods to generate revenue, and the specific approach often depends on the company's target audience and priorities:

Premium Features: Some companies offer a basic free tier with limited features like basic security and performance improvements. Upgrading to a premium plan unlocks additional benefits like advanced security options, parental controls, malware blocking, or even a VPN service bundled together.

Partnerships: Private DNS providers might partner with other security or privacy-focused companies. For example, they could offer their DNS service bundled with an antivirus program or a password manager, earning a commission for user acquisition.

Data Analytics (Aggregated & Anonymous): While they wouldn't be able to see the specific websites you visit due to encryption, some companies might anonymize and aggregate DNS query data to identify broader trends. This anonymized data could then be sold to market research firms or other businesses for insights into general browsing habits (without compromising individual user privacy).

Freemium with Targeted Ads: Similar to the premium model, some free tiers might inject targeted advertisements into their user interface or search results. This approach is less common for privacy-focused companies, but it's a potential revenue stream for some.

It's important to carefully consider the privacy policy of any Private DNS service before using it. This will give you a clearer picture of how they handle user data and how they finance their operations.

E:

My resume:

My grandma used to say: nothing is free, only death, and that costs life.

There's a lot of truth to that statement. Accessing many free online services such as Private DNS does come with a kind of hidden cost: your personal data. Here's why:

Data is Valuable:Companies collect information about your browsing habits, interests, and online activity. This data is valuable because it allows them to:

Target Ads: By understanding your preferences, they can tailor advertisements to be more relevant and appealing to you, potentially increasing the chance you'll click and generate revenue.

Improve Services: Analyzing user data helps companies understand how people use their platforms and identify areas for improvement.

Sell Data (Anonymously): In some cases, companies might sell anonymized and aggregated user data sets to research firms or other businesses for market research purposes.

Free Services Need Funding: Many popular websites and apps wouldn't be viable if they relied solely on traditional payment models like subscriptions or fees. By collecting and leveraging user data, they can generate revenue through advertising or data insights, allowing them to offer "free" services to users.

Not All Private DNS is Equal: Providers differ in their focus (security, performance, privacy) and how they handle user data: Verifying exactly how a private DNS service handles user data can be challenging. Here's a breakdown of the limitations:

Limited Transparency: Many private DNS providers don't offer independent audits of their data handling practices. You primarily rely on their privacy policy, which may use technical jargon or lack specific details.

Focus on Features: Marketing often emphasizes features like security or performance, with less focus on data practices.

Here are some ways to get a better sense of their data handling:

Review Privacy Policy: Carefully read the privacy policy of the private DNS service you're considering. Look for details on:

What data is collected (queries, logs, etc.)

How long is data stored

Whether data is shared with third parties

The provider's commitment to user privacy

Look for Independent Reviews: Search for reviews or comparisons of private DNS services by security or privacy-focused websites. These reviews might analyze the provider's privacy policy and offer insights into their data practices.

Consider Certifications: Some private DNS providers might have certifications from independent organizations related to data privacy practices. These certifications offer some level of external verification. However, understand the scope of the certification and what it guarantees.

Contact Support: If you have specific questions about data handling, you can try contacting the private DNS service's support team. While their response might not be exhaustive, it can provide some additional information.

Overall: Verifying private DNS data handling practices takes some effort and research. While you might not achieve absolute certainty, the steps mentioned above can help you make a more informed decision based on the available information.