At the beginning of April, Cloudflare launched its new public DNS 1.1.1.1 claiming to be faster and more private than those of Google or OpenDNS . The free service gained traction quickly, as having resolution of domains alternative to those of your ISP that make your browsing more private for the fabulous price of free, is not something that many people can resist.
And now, Cloudflare is taking the service a little further, announcing DNS resolution for Tor to offer even more private browsing. This is specially designed for those cases in which the user does not want to reveal his IP even to whoever resolves the domains .
In Cloudflare explain that although your policy is never, but never write the IP address of a client on disk and also delete all records in 24 hours, there are still exceptionally aware of their privacy, those who do not want to disclose their IP never, nor to the DNS service.
1.1.1.1 as a hidden Tor service
The point is that although Tor is an ideal form of anonymous browsing, Tor’s DNS resolution still uses IP addresses, so you still need to resolve DNS to navigate the web using Tor .
There are two ways in which a domain name can be resolved using Tor: the first is to resolve the name directly, and then talk to the IP address through Tor; the second is to use a Tor bridge relay instead of connecting directly to Tor’s public network, so that it resolves the name.
The first option filters your IP to the one who resolves your DNS and unless your client uses DNS over HTTPS or over TLS, it filters your destination name to the ISP. That is, your Internet service provider can continue to know which sites you visit through Tor .
The solution offered by Cloudflare for this is its hidden resolution service. Using this service in your installation of Tor, all communications will be diverted to the corresponding DNS ports with 1.1.1.1, so that the apparent IP address of the client is different and not yours .
The Tor + 1.1.1.1 combo is very attractive even in more cases of private browsing, offering protection against attacks, malicious exit nodes, and the eyes of your ISP.
