Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why is using 1.1.1.1 as a DNS resolver and using VPN better than trusting your ISP...


Often, you may be stuck with your particular ISP, and with one or more ip's uniquely tied to you, your identity, and your address. A VPN can at least mitigate that, and you can swap them at will, nothing to do with your current residence. We don't necessarily trust our VPN provider[s] more than we do our ISP.


This. I fail to see how an issue, which is essentially about trust, can be solved by trusting someone else. If you don't trust your ISP you should switch. If you don't trust your ISP and can't switch then you should be using VPN or TOR.


ISP's can do awful things to traffic. I'm not sure why you should trust your ISP and if anything trusting makes you blinkered to some of their practices.


For me the point is: why would you trust a VPN provider any more than you trust an ISP? There might be specific reasons for specific providers, but in general you're putting the same amount of trust in either way.


Maybe you are not in the United States, but for those that are, the answer is pretty simple.

It is reasonable to trust a VPN provider more than an ISP because you have a choice of VPN provider, you can vet them and choose the one that you feel provides the best safeguards to your privacy and security. Most Americans have between zero and one choices for high speed internet. Even in major metropolitan areas it is common to live in a cable monopoly, with a phone company providing sub-par "competition". You cannot vet your choice and choose the one that provides the best experience because you have no options. Even those that do have a choice may still connect to coffee shop or hotel WiFi on occasion, losing choice again.

In short, VPN providers are a) competitive and b) portable.

You're not wrong that you're putting the same amount of trust in them, but these properties mean you would not be wrong to do so.


Some VPN providers have paid for external audits to verify their processes; they can also exist in countries with more favorable privacy laws. ISPs of course are local to you and your jurisdiction.


And that is a fair point. I don't see why you would simply use an alternative DNS resolver in that case and not get a VPN or an SSH tunnel or something?


As for the DNS resolver it may be the case if you have an ISP that sends you to pages full of ads if it can't resolve a name or is slower than your local ISP. There's a good tool to test it and compare the various providers from your location: https://code.google.com/archive/p/namebench/


Because ISPs are desperately trying to be more than just "dumb pipes" that carry our traffic. To expand their revenue many of them track DNS and domains visited to sell ad data to other companies.


If your ISP is also a media conglomerate, you may have a problem. Fortunately, that's not always the case. My ISP is just an ISP. Their growth is in providing more and better internet services to more high-value clients.

I trust them a lot more than I trust some VPN provider.


Your ISP is usually in the same legal jurisdiction as you are, VPN might not be.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: