29

Newb: I set secure DNS to Mullvad DNS. Since I can't afford a VPN, I do my web searches on Tor browser.

top 12 comments
sorted by: hot top controversial new old
[-] samsapti@feddit.dk 21 points 3 weeks ago

I would not do that. The whole idea behind Tor Browser is to make users look similar. By using a custom DNS provider you stand out from the crowd, thus making yourself more unique/identifiable. A website may not be able to see who you are, but it's gonna have a way easier time seeing that you're the same person visiting as the person who was there yesterday.

[-] archy@lemmy.world 3 points 3 weeks ago

Well, would they stand out to the next node but not to all Intermediaries, right, including the website they are visiting?

[-] wintermute@discuss.tchncs.de 1 points 3 weeks ago

How would the website know that you are using a custom DNS provider?

[-] johnnyb@discuss.tchncs.de 3 points 3 weeks ago* (last edited 3 weeks ago)

redirecting you to a unique subdomain and watch which resolver comes calling. that's how ipleak and co. check for DNS leaks.

[-] wintermute@discuss.tchncs.de 2 points 3 weeks ago

Interesting... Never thought about that.

[-] gibson@sopuli.xyz 2 points 3 weeks ago

And that's why you should stick with tor browsers defaults (with the exception of adjusting security slider to meet needs). They have a whole team who are paid to think about it.

[-] berty@feddit.org 9 points 3 weeks ago

Why would you want to do that? Do not change anything as the idea is that all users use the same Tor as it is.

[-] shortwavesurfer@lemmy.zip 9 points 3 weeks ago

My guess is that it would just completely override the DNS.

Why would it be a bad idea?

[-] jaggedrobotpubes@lemmy.world 5 points 3 weeks ago

I think tor works in part because everybody is identical in ways that change if you fiddle with settings.

[-] Majestic@lemmy.ml 4 points 3 weeks ago

No. It's fine.

Tor uses its own DNS system to my recollection. It's true there is DNS as part of fingerprinting and DNS leaks are a concern for VPNs (see for example https://www.dnsleaktest.com/) but Tor is not vulnerable to this and it's more a problem of you're using a VPN to appear to be in NYC but your DNS shows Phoenix so that's a big discrepancy that raises the uniqueness of your fingerprint on a VPN and even lets threat actors guesstimate where you actually are. As I said though this is not an issue on Tor.

So understand that the DNS from Mullvad will only affect other programs not Tor. It will prevent say your ISP's DNS from seeing your video games calling their domains that way. Your ISP can still see you're connecting to infrastructure for as an example Genshin Impact when you launch the game because they can see where your traffic is flowing and the IP addresses as well as traffic patterns, ports, etc. It somewhat limits the data and visibility they get but there is something called SNI snooping as well as of course the fact they know the IP addresses where your connections go. So it's perhaps better than nothing but understand the limits of it as they still have a lot of visibility though they shouldn't be able to see your web searches regardless just that you're accessing google or bing or duckduckgo as those sites use HTTPS.

[-] Undertaker@feddit.org 2 points 3 weeks ago* (last edited 3 weeks ago)

More context please. Where did you set the DNS? Smartphone, desktop? In browser or on system settings?

Assuming the following: You set the general DNS on your AOSP based smartphone to Mullvad and use Tor bowser simultaneously.

This is perfectly fine as Tor browser uses its own DNS. They won't interfere.

this post was submitted on 05 Aug 2025
29 points (100.0% liked)

Privacy

41355 readers
806 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS