DNScrypt DNScrypt vs Stubby Help

[Sean Rhodes]

I'm not sure if i'm in the right thread, but can someone advise whether stubby or dnscrypt is better, or if either would interfere with my current setup?

 amtm 3.1.8 FW             by thelonelycoder
 RT-AC3200 (armv7l) FW-384.13 @ 10.0.1.1
    The Asuswrt-Merlin Terminal Menu         

 1  open     Diversion                v4.1.12
 2  open     Skynet                    v7.2.3
 3  open     FlexQoS                   v1.0.6

 5  open     scribe                    v2.4.3
 6  open     x3mRouting    v2.0.0   -> v2.4.0

 7  open     unbound Manager            v3.21
 8  open     nsrum                    v30.4.0

 j1 open     connmon                   v2.8.1
 j2 open     ntpMerlin                 v3.0.0
 j3 open     scMerlin      v2.0.1   <- v2.0.0

 j4 open     spdMerlin                 v4.1.1
 j5 open     uiDivStats                v2.2.2
 j6 open     uiScribe                  v1.4.0

 ep manage   Entware packages

 dc manage   Disk check script   dcl show log
 rs manage   Reboot scheduler Wed @ 4:15
 sw manage   Swap file /mnt/asus_usb 2.0G

 i  show     all available scripts or tools
 u  check    for script updates

    amtm options
 e  exit      t  theme   r  reset   a  about
_____________________________________________

 

[L&LD]

You're using Unbound Manager already.

Better for what?

 

[Sean Rhodes]

My understanding was that they both encrypt the DNS, but I don't know which is better, or whether there are any incompatibilities with what I have currently installed, or whether they are redundant in my current configuration

 

[Zastoff]

Looks like you use unbound_manager and from what I've read about it, Is fast and have security in focus, it is not encrypted but have ways to make it harder to detect.(Running your own dns server)

The in gui (WAN DoT stubby) is encrypted

Dnscrypt-proxy v2 offers Dnscrypt protocol servers and DoH protocol servers, Also encrypted.

The encrypted options have about the same level of security, Comes down to what servers you trust.
And note the encrypted options does not fully hide/secure your dns traffic.
I prefer Dnscrypt v2 protocol with DNSSec enabled servers.
(Was made for DNS, open source and complete specification since 2013)

edit:
Unbound_manager, In Gui DoT and DNSCrypt-proxy do not work together.
Recommend to read up on the differens between them and test what you like best.
Unbound_manager
DoT(stubby)
DNSCrypt-proxy

 

[Sean Rhodes]

Looks like you use unbound_manager and from what I've read about it, Is fast and have security in focus, it is not encrypted but have ways to make it harder to detect.(Running your own dns server)

The in gui (WAN DoT stubby) is encrypted

Dnscrypt-proxy v2 offers Dnscrypt protocol servers and DoH protocol servers, Also encrypted.

The encrypted options have about the same level of security, Comes down to what servers you trust.
And note the encrypted options does not fully hide/secure your dns traffic.
I prefer Dnscrypt v2 protocol with DNSSec enabled servers.
(Was made for DNS, open source and complete specification since 2013)

edit:
Unbound_manager, In Gui DoT and DNSCrypt-proxy do not work together.
Recommend to read up on the differens between them and test what you like best.
Unbound_manager
DoT(stubby)
DNSCrypt-proxy

Thanks for the help, you answered my question in the edit at the bottom. It looks like I have a lot more reading to do first before changing my current settings

 

[L&LD]

There is nothing to change. Being your own DNS server is as safe as you can be when online/connected.

All the other options are just like your elderly aunt telling you 'it's okay, it just a bump, it will feel better soon'.