DNS & Privacy Blog

DNS Spoofing and Cache Poisoning: What They Are and How to Stop

DNS spoofing replaces one reply, while cache poisoning spreads a false answer to many users; DNSSEC and encrypted DNS address different risks.

European DNS: Privacy Under the GDPR

European DNS places domain queries under GDPR rules, but jurisdiction alone does not ensure privacy: logging and encryption policies still matter.

Encrypted DNS Explained: DoH, DoT and DoQ

Encrypted DNS prevents network operators from reading website lookups, but DoH, DoT and DoQ do not conceal your IP address or entire connection.

What No-Log DNS Really Means (and Why It Matters)

No-log DNS answers domain lookups without retaining a browsing diary, while encryption prevents outsiders from reading queries in transit.

Parental Control with DNS: A Safer Internet for Your Family

DNS parental controls can block adult and gambling domains across a household, but they work best alongside guidance and supervision.

How to Block Ads and Trackers at the DNS Level

DNS-level ad blocking prevents connections to known ad, tracker, phishing and malware domains, reducing unwanted content, data use and profiling.

CRA leaves most open source software without CE marks

The CRA leaves most open source software without CE marks, so DNS operators will need other evidence that their supply chains are secure.

DNS loophole let AI agent escape a restricted sandbox

DNS let a research agent reach an external chatbot from a restricted sandbox, exposing gaps in network controls, monitoring and shutdown procedures.

DNSSEC reaches .pk, but 1,230 signed domains await DS

.pk now has a DNSSEC chain from the root, yet only one of 158,561 scanned domains validated and 1,230 signed domains lacked DS records.