Tools · Chapter 8

DNS Resolvers

Five resolvers by operator and logging policy.

DNS Resolvers
ResolverOperatorLogsFeatures
dns.mullvad.netMullvadNo logsDoH and DoT. No filtering on dns.mullvad.net; use adblock.dns.mullvad.net to block ads and trackers. Operated by the same company as Mullvad VPN — a privacy-first organisation.
dns.quad9.netQuad9 (nonprofit)No IP logsDoH, DoT, DoQ. Blocks malware domains. Swiss nonprofit. Good all-rounder.
cloudflare-dns.com (1.1.1.1)CloudflareMinimal (24hr)DoH and DoT. Fast. Cloudflare is a large US company — acceptable choice, not my first pick for privacy purists.
doh.opendns.comCiscoYesNot recommended for privacy — Cisco retains logs.
8.8.8.8 / 8.8.4.4GoogleYesDo not use for privacy. Google retains and uses DNS data.

Reproduced verbatim from The Privacy Diet, Chapter 8 — “Choosing a DNS Resolver”. The book explains the reasoning behind each verdict.

Changes since the book

The table above is never edited. Anything that changes after publication is noted above it, with the date.

  • 3 November 2026 — Mullvad's public DNS: closure announced for 2 November 2026.