<!DOCTYPE html><html><head>
<style type="text/css">body { font-family:'Times New Roman'; font-size:13px}</style>
</head>
<body>On Sat, 22 Nov 2014 19:13:17 -0800, ZEROF <security@netmajstor.com> wrote:<br><br><blockquote style="margin: 0 0 0.80ex; border-left: #0000FF 2px solid; padding-left: 1ex"><div dir="ltr"><pre>I saw some info just yesterday, but it's not in actual server configuration. Can you provide some good resource for setting dnscrypt-proxy? And no logging DNS's is good to protect end users</pre></div></blockquote><div>A caveat: You should probably avoid using the default OpenDNS servers with dnscrypt-proxy.
</div><div><br></div><div>From the 'Bad Relays' wiki page https://trac.torproject.org/projects/tor/wiki/doc/badRelays</div><div><br></div><div> "The most common misconfiguration I have seen is using <a class="ext-link" href="http://www.opendns.com/"><span class="icon"></span>OpenDNS</a>
as a host's nameserver with what I think is the OpenDNS default config.
Services such as OpenDNS lie to you, under the name of protecting you.
The result is for instance getting redirected to their webpage when you
want to visit evil sites such as <a class="ext-link" href="https://www.torproject.org/"><span class="icon"></span>https://www.torproject.org/</a>."
</div></body></html>