What is the purpose of private DNS setting if I use a VPN?

beyeso

Just disable it. You're already using a VPN so why use private dns?

Godi

Can someone that knows this well provide a technical explanation of if it should be set on disabled or automatic when using a VPN?

treequell

Godi If you are connected to VPN, set you DNS to automatic. That way you will use the VPN's DNS server.

That's because you are already trusting your VPN with your internet traffic. With private DNS you would be trusting an additional party with your internet traffic.

Mr_Compliance

Maybe some day we'll figure this out once and for all.

In the mean time, I'll leave mine set to Automatic.

Relaks

Pociwo
That page is explaining how to turn off third-party DNS services in case you have already configured a non-ProtonVPN DNS service on your device. If you are running the official ProtonVPN app, you can set Private DNS in Android settings to either Off or Automatic, and DNS requests will still get routed through ProtonVPN. You can check this for yourself with sites like https://dnsleaktest.com and https://browserleaks.com

Tijom

Relaks
Is there any difference at all between off and automatic in this case?

[deleted]

Relaks I just switched to Proton VPN yesterday, and it says to turn it off.
Source: https://protonvpn.com/support/dns-leaks-privacy/

[deleted]

Relaks That page is explaining how to turn off third-party DNS services in case you have already configured a non-ProtonVPN DNS service on your device.

That is not true. It says that they strongly recommend to disabling it when using Proton VPN.

Relaks

Tijom
I don't think so. The effect seems to be the same.
Anyone correct me if I'm wrong.

Tijom

Relaks
If effect is the same then it is better to disable it, so it doesn't try to make any connections

[deleted]

It would be good if the guy behind the GrapheneOS account in this forum could clarify this for us.

Relaks

[deleted]
Ok then.

User2288

OpenSource-Ghost

Also, using private DNS server in Android settings is a good idea even for VPN users. It makes sure the initial DNS resolution of your VPN tunnel domains is encrypted.

Actually this makes sense, but the question is would it override the rest of the DNS queries that were supposed to be sent to the VPN's DNS server?

I'd really like to know this.

I want to know how I should set things up with my VPN.

OpenSource-Ghost

User2288

Yes, it overrides VPN-set DNS server settings. If you want the best of both worlds, then I suggest signing in to VPN account with private DNS server enabled and once signed in, disable it.

It would be nice to have a toggle in GrapheneOS to enforce private DNS queries only outside of VPN tunnels.

« Previous Page