You Need To Stop DNS Leaks - Daily Blog 058
My mind has been on the Domain Name System (DNS) server for about a week now. I've been mulling over whether VPNs are necessary and what level of trust should be placed in a DNS provider. It's evident not to trust your ISP's DNS since some companies have been caught manipulating the data or using you DNS metadata to sell to other companies.
Both of which suck.
This collection of data via the DNS still happens even when a user connects to a VPN. The data between the user and the site is encrypted but the request to what IP address ties to the requested domain name, is not. Worst of all the user is almost always using their ISP's default servers which they control.
I changed mine to the Google DNS, 8.8.8.8, 8.8.4.4. That is better than nothing, perhaps.