Show HN: Running the second public ODoH relay
Every existing anonymous-DNS option
(Apple Private Relay, NextDNS, Cloudflare Families) requires signing up.
ODoH (RFC 9230) is the protocol that splits ‘who you are’ from ‘what you
asked’ across two independent operators. Numa v0.14 ships the client,
the relay, and a public deployment in one MIT-licensed binary. Here’s
what the protocol actually does, what it doesn’t fix, and what it took
to deploy the second public relay in the ecosystem.
(Apple Private Relay, NextDNS, Cloudflare Families) requires signing up.
ODoH (RFC 9230) is the protocol that splits ‘who you are’ from ‘what you
asked’ across two independent operators. Numa v0.14 ships the client,
the relay, and a public deployment in one MIT-licensed binary. Here’s
what the protocol actually does, what it doesn’t fix, and what it took
to deploy the second public relay in the ecosystem.
Summary not yet generated for this article.
Original Text
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.
Comments (41 of ) ⌛