my DNS services over HTTPS and TLS
And now, my most recent addition to the neverending series of "services I host on a single server because why not": kescherDNS.
No, not the unencrypted one at port 53. I would not like to be part of DNS amplification attacks, thank you very much.
Hostnames:
- dns.kescher.at
IPs:
- any IP returned by a DNS lookup for dns.kescher.at
DNS-over-HTTPS:
Located at https://dns.kescher.at:443/dns-query (as standrdized). You can actually use this in Firefox as well, by enabling DoH in network settings and putting "https://dns.kescher.at/dns-query" into the field for a custom server.
DNS-over-TLS:
Located at <hostname>:853. You can use this on Android 9 onwards, using the "Private DNS" feature (just enter dns.kescher.at into the text field).