• 0 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle
  • Encrypt-Keeper@lemmy.worldtoSelfhosted@lemmy.worldDNS?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    4 days ago

    Getting all the functionality of Pihole into Unbound would be a good deal more than “a little work” lol. And for no real practical reason when all you’re trying to do is set up secure DNS with some ad blocking on your network. And this is coming from a professional who wouldn’t have to “learn” anything to do it. If it was really that little work, Pihole + Unbound wouldn’t be the go-to solutions for so many people.


  • Encrypt-Keeper@lemmy.worldtoSelfhosted@lemmy.worldDNS?
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    4 days ago

    I mean if you want to build something around Unbound to do ad blocking and set up a monitoring stack for metrics and all that jazz that’s great, more power to you. But you already have two things built for purpose, there’s no reason to go out of your way to do that. And I don’t think OP here is prepared to do all that.


  • Encrypt-Keeper@lemmy.worldtoSelfhosted@lemmy.worldDNS?
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 days ago

    For the same reason you’re running AdGuard and not just pointing all your devices at the recursive upstream.

    You’re using AdGuard / Pihole as an ad sinkhole, not just to cache and forward DNS requests. Like if you really wanted to you could hack together something in Unbound to do that, but why would you do that when Pihole already exists? You have two things built for purpose.


  • Encrypt-Keeper@lemmy.worldtoSelfhosted@lemmy.worldDNS?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    5 days ago

    If you want to run your own recursive DNS server, why would you run two separate DNS servers?

    I’m not sure I understand your question. A recursive DNS server and a local DNS cache/forwarder/are two different things with two different purposes. You will always need both. You yourself are using AdguardHome and that is just connecting to recursive DNS server upstream. In my scenario you’re just running both yourself instead of you running one and then letting a 3rd party run the other for you.

    Your outbound queries will still be unencrypted, so your ISP can still log them and create an advertising profile based on them.

    You can encrypt the recursive queries through your ISP if you want to. Though the effectiveness of any profiling your ISP would do to you are minimized by Qname minimization that Unbound does by default.

    If you’re just using DoH then you’re just shifting who’s making that advertising profile on you from your ISP to whoever is hosting your upstream recursive DNS server. It doesn’t matter how much encryption you do because on the other end of that encrypted connection is the entity who you’re giving all your queries to.


  • Encrypt-Keeper@lemmy.worldtoSelfhosted@lemmy.worldDNS?
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    5 days ago

    I would say Pihole is a better choice than AdGuard home because PiHole just runs on top of dnsmasq. Throw Unbound on there too as your upstream recursive resolver and you’re set. You don’t even need to worry about an encrypted session to your upstream anymore because your upstream is now your loopback.



  • The point of paid SSL at this stage in the game are the higher tiers of verification. Instead of just verifying that you own the domain, you can verify that you are who you say you are. These are called Extended Validation and Organizational Validation certificates. This has historically been desirable by businesses. It used to be that these higher tier certs would not only give you a lock icon in the address bar of a web browser, but also a little blurb confirming your organization is legit. Not sure if this is still the case though. You will see the extended validation when you check the sites certificate though for sure.

    As far as encryption and security, there’s no difference. Also side note, the Comodo brand still technically exists but it was bought by Sectigo like 7 years ago.









  • Increased computing power used to open up entirely new concepts in gaming. 3D environments, then larger and larger worlds, dynamic physics engines, more complex NPC Ai and more power to run larger numbers of enemies at a time.

    Absolutely none of that makes a new console inherently more fun. Many of the games I have on my launch PS1 and N64 are to this day unsurpassed. Not only that but some of the most critically acclaimed, genre defining games of the last 10 years could be run on a calculator. On the other hand we have all this extra compute power yet video game AI is universally garbage. To this very day the hands down best combat AI in a game are Halo 1 and the original F.E.A.R.

    Console upgrades today are about making things prettier, fit on bigger screens, and perform better. If you think the jump from PS4 to PS5 wasn’t worth the money, there’s no upgrade that will ever be worth it to you again.




  • Computing hardware when the PS4 and PS4 pro came out was still in the before times when new hardware meant doing more for the same money. It’s been a minute since those times and that isn’t really something Sony has any control over.

    Meanwhile you also have a weird phenomenon that didn’t exist during the PS4 generation where you have a huge spike in inflation between your base console and pro launch. When the PS5 launched at cost $500, but $500 then is more than $600 now. The PS5 pro is really only $100 more in 2024 money than the PS5 was at launch.

    Maybe Sony is making the wrong move here but understanding the market and economy as it is today, I’m not sure what else they could have done besides not launch a pro console at all.