Overview
What is DNSCrypt?
DNSCrypt is a protocol developed by DNSCrypt that aims to enhance the security and integrity of DNS communications. According to the vendor, DNSCrypt prevents DNS spoofing by using cryptographic signatures to authenticate the connection between a DNS client and a DNS resolver. It is marketed as a solution...
Leaving a review helps other professionals like you evaluate Web Content Filtering Solutions
Be the first one in your network to review DNSCrypt, and make your voice heard!
Get StartedPricing
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
1 person also want pricing
Alternatives Pricing
Product Details
- About
- Tech Details
What is DNSCrypt?
DNSCrypt is a protocol developed by DNSCrypt that aims to enhance the security and integrity of DNS communications. According to the vendor, DNSCrypt prevents DNS spoofing by using cryptographic signatures to authenticate the connection between a DNS client and a DNS resolver. It is marketed as a solution suitable for companies of all sizes, as well as individuals and organizations. DNSCrypt is widely used by IT professionals, network administrators, cybersecurity experts, internet service providers, and web hosting companies to ensure secure and reliable DNS resolution.
Key Features
DNSCrypt Protocol: According to the vendor, DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver, aiming to prevent DNS spoofing by verifying the origin and integrity of DNS responses.
Open Specification: DNSCrypt is an open specification, allowing anyone to implement it. The vendor emphasizes that DNSCrypt is not affiliated with any company or organization, ensuring neutrality and transparency.
Free DNSCrypt-enabled Resolvers: Users can connect to several companies, organizations, and individuals operating public recursive DNS servers that support the DNSCrypt protocol. The vendor states that these resolvers are available for free.
Constantly Updated List of Resolvers: DNSCrypt clients come with a default CSV file of DNSCrypt resolvers, but users have the option to download a constantly updated list to replace the default file. Additionally, users can submit their own public DNS resolvers to be added to the list, according to the vendor.
DNSCrypt Clients for Various Platforms: DNSCrypt clients are available for different platforms, including Windows, macOS, Linux/BSD, Android, iOS, and routers. Users can choose the client that is compatible with their operating system or device, as claimed by the vendor.
Firewall Setup: Users need to allow outgoing queries to port 443 on both TCP and UDP in their firewall settings to ensure seamless communication with DNSCrypt-enabled resolvers, according to the vendor.
DNS Traffic Control: DNSCrypt clients provide control over DNS traffic, allowing users to review DNS traffic in real-time and detect compromised hosts and applications. Users can also block ads, trackers, malware, spam, and any websites based on their own defined rules, according to the vendor.
Local DNS Cache: DNSCrypt clients can be used as forwarders for local DNS caches like Unbound or PowerDNS-Recursor, aiming to improve performance and high availability. Users can configure multiple DNSCrypt client proxies as upstream resolvers for their caching resolver, according to the vendor.
Signature Verification: DNSCrypt provides signature verification for files, including source code tarballs, precompiled binaries, and lists of resolvers. Users can verify the authenticity and integrity of these files using the Minisign tool, as claimed by the vendor.
Running Your Own DNSCrypt Server: Users can run their own DNSCrypt server by installing DNSCrypt-Wrapper, the reference server-side DNSCrypt proxy. DNSCrypt-Wrapper is compatible with any DNS resolver software, such as Unbound, PowerDNS Recursor, and BIND, according to the vendor.
DNSCrypt Technical Details
Deployment Types | On-premise |
---|---|
Operating Systems | Windows, Linux, Mac, OpenBSD, FreeBSD, NetBSD |
Mobile Application | Apple iOS, Android |