Question: Support for Legacy DNS (UDP 53)

[sertchan]

Hi hagezi i wanted to let you know that my family and friends have been using your DNS lists for months with great results. We recently migrated all our devices to your DNS servers and are very pleased with the performance.
The only issue we face is that our router supports only legacy (unencrypted) DNS. Because of this, we have to use a separate provider for the router. Are there any plans to support DNS requests via UDP port 53 in the future? Thank you.

[hagezi]

HaGeZi DNS does not offer legacy DNS over unencrypted Port 53 to prioritize user privacy, enhance security, and prevent common abuse vectors associated with traditional DNS traffic. Unencrypted Port 53 exposes queries to interception, eavesdropping, and manipulation by ISPs, governments, or attackers, compromising the privacy-focused mission of this EU-based service. Instead, it exclusively supports modern encrypted protocols like DNS over TLS (DoT on Port 853) and DNS over HTTPS (DoH on Port 443), ensuring end-to-end encryption and integrity without sacrificing performance.

This design choice aligns with European data protection standards like GDPR and ENISA recommendations, reducing risks such as DNS cache poisoning, amplification attacks, and tracking. Legacy Port 53 remains vulnerable to these issues due to its plaintext nature and historical exploitation in DDoS and surveillance scenarios. Users are encouraged to configure clients supporting DoT/DoH for seamless, secure resolution.

[sertchan]

I clearly understand, thank you for your support

[hagezi]

@sertchan see: #22