Remix clone Hacker News

new | show | ask | jobs Github

▲

jsheard 3 days ago

Mullvad runs a privacy-oriented DoH service, which is free to use regardless of whether you use their VPN service.

https://mullvad.net/en/help/dns-over-https-and-dns-over-tls

▲

traceroute66 3 days ago | parent [-]

Mullvad DoH is great, and things like ad-blocking seems to be more effective on Mullvad.

But, and its a BIG BUT ....

Mullvad don't have the geo-coverage that Quad9 has. They are predominantly Northern Europe with very limited server coverage outside (6x Northern Europe, 2xUSA, 1xSingapore)

Which is fine if you spend most of your time in those three places.

But if you are a road-warrior or you live elsewhere, then Quad9 is the better choice as they have global coverage (200 locations, 90 countries).

Avoid Cloudflare. They log traffic. Sure for a short-time period ($n days) but Quad9 still has the better privacy policy.

Quad9 is also Swiss, not US, so they can't be compelled to do anything under PATRIOT or whatever.

▲

pred_ 2 days ago | parent [-]

> Avoid Cloudflare. They log traffic.

That sounds like a GDPR violation if the logs include PII like IPs and if it's not opt-in. Is that really the case?

	▲	traceroute66 2 days ago \| parent [-]
		> That sounds like a GDPR violation if the logs include PII like IPs and if it's not opt-in. Is that really the case? Cloudflare retain what they call "limited transaction and debug log data" for 25 hours. Cloudflare state that IPs are truncated and the truncated IPs are deleted after 25 hours BUT for "randomly sampled network packets" they will retain the full IP for "network troubleshooting purposes". Even so, as we know, a truncated IP can still be used to track and trace people ... Compare and contrast to Quad9 who explicitly consider IP addresses as GDPR PII ("Quad9 regards Internet Protocol ("IP") addresses associated with its users to be Personally Identifiable Information ("PII")") Quad9 states IPs are only ever in RAM "for the few microseconds to milliseconds necessary to service the user's query" They also state "Quad9 does not collect or record IP addresses, nor does it collect or hold any proxy for or representation of IP addresses, nor does it collect or hold any other unique identifier of individuals in lieu of IP addresses." Which is why I said Quad9 have a much better privacy policy.