1

Does NextDNS really support DNSCrypt?

When I copy the DNSCrypt (sdns) address showing under https://my.nextdns.io and paste it into https://dnscrypt.info/stamps/ it translates into an ordinary DoH-address pointing to my profile. Is this correct?!

Does NextDNS support true DNSCrypt-protocol/connections since this seems to be a "shortcut" just doing DoH?

12 replies

null
    • NextDNs
    • 1 yr ago
    • Reported - view

    The DNSCrypt client supports the DoH protocol. The DNSCrypt protocol never took off. It is unlikely we ever support it.

      • Pro Subscriber ✅
      • Jorgen_A
      • 1 yr ago
      • Reported - view

      NextDNS Got it and 100% agree... Was mostly curious if it was a "bug" and not planning to use it.

      • wprivera.1
      • 1 mth ago
      • Reported - view

       Hi. So I manage six Unifi sites for my family across the US. Unifi's latest release supports DNS over HTTP. I have a custom NextDNS profile for my brother's UDR. I copied the CryptDNS Stamp from his profile's setup page, and pasted all of the settings in the appropriate spot. I got an error initially, but that resolved after rebooting the UDR. 

       

      I did the same thing for my UDM Pro Max, with my own custom NextDNS profile. Received the same error. But on mine, the error did not resolve with reboot. I've been using https://dnscrypt.info/stamps/ to generate new stamps, with no success.

       

      Can you please explain the exact settings I need to plug into the website to generate the correct CryptDNS Stamp?

       

      Thank you for your help.

      • A_T
      • 2 wk ago
      • Reported - view

      Interesting. For me it is as simple as entering the stamp info on the right place.

      I get it directly from setup/router/DNSCrypt

      The only time I use the stamp calculator is when I want to identify and ID to identify the device.

      From my experience all I can tell you is to make sure you are running the latest version of DNSCrypt and follow the docs for your device on how to properly enter the necessary stamp info.

      • A_T
      • 2 wk ago
      • Reported - view

      Hmmm From my experience DNSCrypt is going strong, it has gotten more robust and added support for DOT, DOH and Anon-DNS and DNSCrypt ver3  is coming strong. Truly a great solution. It would be very nice and welcomed if NextDNS were to truly support it.

      • NextDNs
      • 2 wk ago
      • Reported - view

       I think you are confusing dnscrypt-proxy software and the dnscrypt protocol. We fully support dnscrypt-proxy via the compatible protocols.

      • A_T
      • 2 wk ago
      • Reported - view

      You know, I think you are right. I surely am confusing or misunderstanding some technical aspects. I am referring to the dnscrypt protocol per se rather than DOH by way of dnscrypt.  The specs for dnscrypt sound much better than those of doh or dot.  To my understanding doh over dnscrypt is just doh where actual dnscrypt communication introduces more security.

      • Martheen
      • 2 wk ago
      • Reported - view

       Meh, the spec might sound better *for you*, but try listing any popular browser or OS (more than 1% of market share) that have native dnscrypt protocol support. Nobody else care about dnscrypt protocol.

      • NextDNs
      • 2 wk ago
      • Reported - view

       There is no security advantage of DNSCrypt over DoH/DoT, other than the fact that it does not rely on a CA. The protocol itself, being UDP-based, is much simpler and specifically designed for DNS. However, the industry has not adopted the DNSCrypt protocol, and you won’t see any major client implementing it. Adding support for new protocols requires maintenance and can introduce new attack vectors for a platform like ours. To onboard a new protocol, we need a critical mass of adoption, which DNSCrypt lacks.

      • Joi
      • 2 wk ago
      • Reported - view

      Please solve this DNSSEC issue with the 8b936b.nextdns.io. Please solve it.

      • Hell
      • 5 days ago
      • Reported - view

       I am unable to duplicate my Nextdns profile when i try to Duplicate my Profile i get an error message ( Network Error Unable to post profiles). This problems happens only when i try to duplicate my nextdns profile but not when i Create a new profile. All the domains are enabled and i also tried using different dns but the issue remains unsolved. This issue started from the last month.

      • peter.27
      • 14 hrs ago
      • Reported - view

      Is this synonymous with dnscrypt-proxy2 as well?

      I really enjoyed my experience with the following:

      Install Guide: https://www.snbforums.com/threads/dnscrypt-installer-for-asuswrt.36071/

      GitHub: https://github.com/thuantran/dnscrypt-asuswrt-installer

Content aside

  • 1 Likes
  • 12 hrs agoLast active
  • 12Replies
  • 1862Views
  • 8 Following