https://nx.coreinfra.org/blog/Recent content in Blog on nxdomain.coHugoen-US© 2023–2026 NXDOMAINhttps://nx.coreinfra.org/blog/resolver-upgrade-2026-10/Sat, 24 Oct 2026 00:00:00 +0000https://nx.coreinfra.org/blog/resolver-upgrade-2026-10/<section class="grid-2"> <div class="stat"><p class="stat-label">Domains blocked at the resolver</p> <p class="stat-value">1.54M</p><div class="stat-note">Two curated feeds, refreshed every 8 hours, held in memory for instant answers.</div> <div class="stack"> <div class="bar" role="img" aria-label="Ads, trackers, telemetry: 417K; Malware, phishing, scams: 1.13M"><div class="seg" style="width:27%" title="Ads, trackers, telemetry: 417K"></div><div class="seg" style="width:73%" title="Malware, phishing, scams: 1.13M"></div> </div> <ul class="legend"><li>Ads, trackers, telemetry: 417K</li><li>Malware, phishing, scams: 1.13M</li></ul> </div> </div> <div class="card"><h3>What you&#39;ll notice</h3> <ul> <li><strong>Fewer ads and trackers</strong> on every device connected to the VPN, with no browser extension.</li> <li><strong>Malicious domains stop at the resolver.</strong> Phishing kits, malware hosts and scam sites return &ldquo;no such name.&rdquo;</li> <li><strong>Nothing to configure.</strong> Same VPN profile, same two DNS addresses, same experience.</li> </ul> </div> </section> <h2 id="five-upgrades-in-one-cutover">Five upgrades in one cutover</h2> <section class="ribbon"> <div class="up"><h3>Encrypted upstream</h3><p>Lookups leave the resolver over DNS-over-TLS. Nobody between us and the internet sees them in plaintext anymore.</p>https://nx.coreinfra.org/blog/choosing-dns-provider/Fri, 05 Jan 2024 00:00:00 +0000https://nx.coreinfra.org/blog/choosing-dns-provider/<h2 id="overview">Overview</h2> <p>Every connection your device makes starts with a DNS lookup. The resolver that answers it sees the name of every site and service you use, decides how quickly you get an answer, and can decide whether you get an answer at all. Most people never choose one; they use whatever their ISP or network hands out. That is a reasonable default, but it is still a choice, and it is worth knowing what you are trusting the resolver with.</p>