I want to use DNSSEC and DNSCrypt with TOR. I wonder which configuration is more secure and better?
Socks4 + dnscrypt-proxy: Forward the DNS traffic to a DNS server which I choose. Although the DNS server is DNSSEC, DNSCrypto and has no logs.
Socks4a: Forward DNS traffic within TOR network and resolve it from many IP address.
Socks5: Forward DNS traffic within TOR network but resolve it from one IP address (exit node).
So, basically the question is "How to use DNSSEC and DNSCrypt correctly over TOR ?"