{"slug": "dnscrypt-proxy", "name": "dnscrypt-proxy", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 4, "commenters": 5, "warners": 0, "score": 3.739, "rising": -1.31, "first": "2025-11-08", "latest": "2026-06-27", "why": "People not using DoH or internal things like dnscrypt-proxy need to get with the times.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 1, "compare": 0, "warn": 0}, "spark": [1, 0, 0, 0, 1, 0, 2, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "People not using DoH or internal things like dnscrypt-proxy need to get with the times.", "kind": "", "icon": true, "domain": "dnscrypt.info", "github_repo": null, "official_url": "https://dnscrypt.info", "pricing": "", "aliases": ["dnscrypt-proxy", "dns-crypt-proxy"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 770271057, "item_id": 48141941, "url": "https://news.ycombinator.com/item?id=48141941", "by": "DyslexicAtheist", "date": "2026-05-14", "stance": "recommend", "quote": "DoHoT implemented with dnscrypt-proxy is my personally fav way to solve this", "excerpt": "DoHoT implemented with dnscrypt-proxy is my personally fav way to solve this ... https://github.com/alecmuffett/dohot speed (over tor) is not a concern either when much of it is served from the cache. alec muffet has the right ideas. but you might want to study his threat-model before copy pasting.", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Running the second public ODoH relay"}, {"id": 769938855, "item_id": 48121178, "url": "https://news.ycombinator.com/item?id=48121178", "by": "alaudet", "date": "2026-05-13", "stance": "recommend", "quote": "DNS is fully self hosted using dns-crypt-proxy", "excerpt": "I am not running a company, just a household but this article speaks to me. I have given this topic plenty of thought in the past year as I have a growing unease with large American tech firms and how they use data. These are some of my setups (in the spirit of the article) I have also rid myself of Google Analytics for a personal website. Replaced with a local solution that parses logs and builds reports that give m", "context": "not running a company, just a household", "use_case": "Self-hosted DNS", "switched_from": "", "story": "I Moved My Digital Stack to Europe"}, {"id": 759958278, "item_id": 47497392, "url": "https://news.ycombinator.com/item?id=47497392", "by": "exiguus", "date": "2026-03-23", "stance": "recommend", "quote": "DNS: Self-hosted AdGuard Home / dnscrypt-proxy 2 + dnsdist / resolver", "excerpt": "My next phone will be also one that is supported by GraphenOS. Currently, my private setup is: - VPN: Windscribe [CA] - AI: Mistral [FR] - Phone: De-Googled Fairphone [NL] (F-Droid/Aurora/OpenStreetMap) - Search: Self-hosted SearXNG + YACY (since ~10 years / good setup & documentation) - Domain Provider: INWX [DE] (since +10 years / good setup & documentation) - DNS: Self-hosted AdGuard Home / dnscrypt-proxy 2 + dnsd", "context": "", "use_case": "", "switched_from": "", "story": "Migrating to the EU"}, {"id": 733743408, "item_id": 45858963, "url": "https://news.ycombinator.com/item?id=45858963", "by": "vpShane", "date": "2025-11-08", "stance": "recommend", "quote": "People not using DoH or internal things like dnscrypt-proxy need to get with the times.", "excerpt": "This wouldn't raise serious concerns. Ask the customers/community if doing it before hand is something they agree with in some form of poll, then just do it. At the end of the day DNS is a million years old, out-dated and the mission is to help make a better internet. If Cloudflare straight up asked us all if it was cool to modify their DNS servers to identify / disrupt malicious use from botnets I'd agree. People no", "context": "", "use_case": "encrypted DNS", "switched_from": "", "story": "Cloudflare scrubs Aisuru botnet from top domains list"}]}], "caveats": [], "who": [{"by": "alaudet", "context": "not running a company, just a household", "url": "https://news.ycombinator.com/item?id=48121178", "date": "2026-05-13"}], "tags": [], "use_cases": ["public dns resolver list", "self-hosted dns", "encrypted dns"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48702273", "title": "Choosing a Public DNS Resolver", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48133561", "title": "Show HN: Running the second public ODoH relay", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48120629", "title": "I Moved My Digital Stack to Europe", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47487436", "title": "Migrating to the EU", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=45857836", "title": "Cloudflare scrubs Aisuru botnet from top domains list", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {"recommend": 1}, "2026-04": {}, "2026-05": {"recommend": 2}, "2026-06": {"neutral": 1}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 779264384, "item_id": 48704024, "url": "https://news.ycombinator.com/item?id=48704024", "by": "Shitty-kitty", "date": "2026-06-27", "stance": "neutral", "quote": "DNScryptProxy maintains a extensive list of public DNS servers.", "excerpt": "DNScryptProxy maintains a extensive list of public DNS servers. It also lists if if they do Dnssec, filetering, logging. https://download.dnscrypt.info/dnscrypt-resolvers/v3/public-resolvers.md", "context": "", "use_case": "Public DNS resolver list", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 770271057, "item_id": 48141941, "url": "https://news.ycombinator.com/item?id=48141941", "by": "DyslexicAtheist", "date": "2026-05-14", "stance": "recommend", "quote": "DoHoT implemented with dnscrypt-proxy is my personally fav way to solve this", "excerpt": "DoHoT implemented with dnscrypt-proxy is my personally fav way to solve this ... https://github.com/alecmuffett/dohot speed (over tor) is not a concern either when much of it is served from the cache. alec muffet has the right ideas. but you might want to study his threat-model before copy pasting.", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Running the second public ODoH relay"}, {"id": 769938855, "item_id": 48121178, "url": "https://news.ycombinator.com/item?id=48121178", "by": "alaudet", "date": "2026-05-13", "stance": "recommend", "quote": "DNS is fully self hosted using dns-crypt-proxy", "excerpt": "I am not running a company, just a household but this article speaks to me. I have given this topic plenty of thought in the past year as I have a growing unease with large American tech firms and how they use data. These are some of my setups (in the spirit of the article) I have also rid myself of Google Analytics for a personal website. Replaced with a local solution that parses logs and builds reports that give m", "context": "not running a company, just a household", "use_case": "Self-hosted DNS", "switched_from": "", "story": "I Moved My Digital Stack to Europe"}, {"id": 759958278, "item_id": 47497392, "url": "https://news.ycombinator.com/item?id=47497392", "by": "exiguus", "date": "2026-03-23", "stance": "recommend", "quote": "DNS: Self-hosted AdGuard Home / dnscrypt-proxy 2 + dnsdist / resolver", "excerpt": "My next phone will be also one that is supported by GraphenOS. Currently, my private setup is: - VPN: Windscribe [CA] - AI: Mistral [FR] - Phone: De-Googled Fairphone [NL] (F-Droid/Aurora/OpenStreetMap) - Search: Self-hosted SearXNG + YACY (since ~10 years / good setup & documentation) - Domain Provider: INWX [DE] (since +10 years / good setup & documentation) - DNS: Self-hosted AdGuard Home / dnscrypt-proxy 2 + dnsd", "context": "", "use_case": "", "switched_from": "", "story": "Migrating to the EU"}, {"id": 733743408, "item_id": 45858963, "url": "https://news.ycombinator.com/item?id=45858963", "by": "vpShane", "date": "2025-11-08", "stance": "recommend", "quote": "People not using DoH or internal things like dnscrypt-proxy need to get with the times.", "excerpt": "This wouldn't raise serious concerns. Ask the customers/community if doing it before hand is something they agree with in some form of poll, then just do it. At the end of the day DNS is a million years old, out-dated and the mission is to help make a better internet. If Cloudflare straight up asked us all if it was cool to modify their DNS servers to identify / disrupt malicious use from botnets I'd agree. People no", "context": "", "use_case": "encrypted DNS", "switched_from": "", "story": "Cloudflare scrubs Aisuru botnet from top domains list"}]}