Celebrating #DigitalIndependenceDay with a foundational one: #DNS.
Every lookup travels unencrypted by default. Third-party #DoT/#DoH resolvers add encryption but shift trust elsewhere.
I run a self-hosted #CoreDNS resolver, handling this locally. Its plugin system enables #AdBlocking and delegation to upstreams like #PKDNS, which resolves names from the Mainline #DHT, offering self-sovereign, censorship-resistant #DNS.
