On: Why Captchas have gotten so difficult

[wl]

I run a VPN from home for using at coffee shops and the like. While the proliferation of HTTPS has made sketchy networks less of a problem, DNS is still leaky.

[Cacti → wl]

You can run the DNS through your VPN and have it use secure DNS outside of your home ISP, and then cache the DNS results on a DNS server at home.

It's not perfect but leaks will end up being pretty minimal, even in accidental situations.

[wl → Cacti]

I route all traffic, including DNS, through my VPN when I'm not at home. I was just commenting on the leakiness of DNS to preempt people saying "HTTPS means you're safe!"

I used to run my own DNS server when I was on Comcast. Now that I have a real ISP run by people I trust who have the same opinions on privacy that I do, it's no longer worth the hassle.