DNS questions #2

Hi, we "met" earler at Cloudflare-tor and I would be interested in listing your DNS server at privacytools.io DNS section (edit: PTIO issue), but I have some questions:

Do you have any plans supporting DoT in port 443 for avoiding restrictive firewalls?
Do you perform DNSSEC validation?
Do you perform QNAME minimization? (I think Unbound does it by default, but you don't mention either it or DNSSEC on the page)
What is included in Unbound verbosity 1? Could you add an example to your privacy policy?

The checkboxes are Privacytools.io requirements, on logging the only requirement is not logging IP addresses during normal operation.

I replied on the GitHub issue regarding this but I'll reply here as well. I plan to implement the missing features in the near future. However, I just started at uni and don't have much time so I'll keep this (and the other one) up to date with my progress.

TODO

DNSSEC validation
Check QNAME minimization
Explain Unbound verbosity in privacy policy

I set these up a while ago and I couldn't remember what I had configured. As I was looking around, I found that all the features requested are enabled; Unbound does DNSSEC validation and QNAME minimisation by default. I've added a new header on the DNS page with a list of the features as well as mentioned the Unbound verbosity in the Privacy Policy

Thanks for the responses :)

The only thing you didn't comment on is whether you have any plans for DoT on port 443? It's not a PTIO requirement, but it's a DoT server type I am seeing a shortage of.

The only thing you didn’t comment on is whether you have any plans for DoT on port 443?

I did forget to respond to that 😅 It's been a long day haha. I will put something on port 443 but I don't know if that will be DoT or DoH yet.