4

I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another provider (ex. google, opendns, etc). I'm interested to hear some feedback or thoughts.

  • 2
    phw and some others did a study of this, a large number of them use Google. The paper can be found here: nymity.ch/pdf/greschbach2016a.pdf (see graph on page 6, for example) – cacahuatl Aug 5 '17 at 21:39
  • 2
    Thanks canonizing ironize! I just wrote a small tutorial for tor exit relay operators on how-to setup their own local resolver. Look for it on the tor-relay mailing list. :) – Dennis Emory Hannon Aug 6 '17 at 23:23
  • Using local recursive resolver based on ISC bind without any ISP upstream or any open dns like google etc – Alexey Vesnin Sep 16 '17 at 1:57
1

I simply use the one the ISP that connects my relay is providing. It's surely not bad to have diversity in resolvers.

There are discussions about advertising a specific DNS resolver on the tor-relays list like https://lists.torproject.org/pipermail/tor-relays/2017-September/012940.html or https://lists.torproject.org/pipermail/tor-relays/2017-September/thread.html#12954

In the end you want diversity. Just like diversity in users helps, so does in relays. Of course exit relays should either have an uncensored connection or explicitely reject the censored IPs in their exit policy.

  • 2
    FYI: The person who asked this question is the person who started the mailing list threads you linked to :P – cacahuatl Sep 15 '17 at 21:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.