| Resolver | Operator | Logs | Features |
|---|---|---|---|
| dns.mullvad.net | Mullvad | No logs | DoH and DoT. Blocks ads and trackers by default. Operated by the same company as Mullvad VPN — a privacy-first organisation. |
| dns.quad9.net | Quad9 (nonprofit) | No IP logs | DoH, DoT, DoQ. Blocks malware domains. Swiss nonprofit. Good all-rounder. |
| cloudflare-dns.com (1.1.1.1) | Cloudflare | Minimal (24hr) | DoH and DoT. Fast. Cloudflare is a large US company — acceptable choice, not my first pick for privacy purists. |
| doh.opendns.com | Cisco | Yes | Not recommended for privacy — Cisco retains logs. |
| 8.8.8.8 / 8.8.4.4 | Yes | Do not use for privacy. Google retains and uses DNS data. |
Reproduced verbatim from The Privacy Diet, Chapter 8 — “Choosing a DNS Resolver”. The book explains the reasoning behind each verdict.