WEBVTT Kind: captions Language: en 00:00:00.180 --> 00:00:02.420 line:90%,end Mullvad is shutting down its free 00:00:02.420 --> 00:00:05.600 line:90%,end public DNS services on November second, 00:00:05.600 --> 00:00:07.440 line:90%,end which is just in a few days. 00:00:07.440 --> 00:00:09.190 line:90%,end This is the video kind of dedicated 00:00:09.190 --> 00:00:11.190 line:90%,end to helping you all figure out what to do 00:00:11.190 --> 00:00:12.600 line:90%,end from here, how to make sense 00:00:12.600 --> 00:00:14.500 line:90%,end of this, how this impacts Mullvad VPN, 00:00:14.500 --> 00:00:16.059 line:90%,end just any questions you guys have 00:00:16.059 --> 00:00:17.060 line:90%,end before the transition. 00:00:17.060 --> 00:00:18.870 line:90%,end I'm gonna do my best to share what I've 00:00:18.870 --> 00:00:21.020 line:90%,end done and the services I've migrated to. 00:00:22.200 --> 00:00:23.650 line:90%,end First, in terms of the actual 00:00:23.650 --> 00:00:25.520 line:90%,end announcement, it's very brief. 00:00:25.520 --> 00:00:27.540 line:90%,end Um, pretty much they have these public 00:00:27.540 --> 00:00:29.090 line:90%,end DNS servers, and it's something 00:00:29.090 --> 00:00:30.560 line:90%,end that we used to recommend in the past. 00:00:30.560 --> 00:00:31.610 line:90%,end I removed it in light 00:00:31.610 --> 00:00:32.780 line:90%,end of their announcement. 00:00:32.780 --> 00:00:34.660 line:90%,end But it's really nice because not only 00:00:34.660 --> 00:00:36.840 line:90%,end is it a private DNS service which protects 00:00:36.840 --> 00:00:38.740 line:90%,end all of your DNS queries and makes sure 00:00:38.740 --> 00:00:40.340 line:90%,end that it's not going through your internet 00:00:40.340 --> 00:00:41.590 line:90%,end service provider so that they 00:00:41.590 --> 00:00:43.800 line:90%,end can track every website you go to, that's 00:00:43.800 --> 00:00:45.500 line:90%,end already its own selling point. 00:00:45.500 --> 00:00:47.500 line:90%,end But on top of that, they have the second 00:00:47.500 --> 00:00:49.180 line:90%,end use case, which is they build 00:00:49.180 --> 00:00:51.050 line:90%,end these managed block lists for you. 00:00:51.050 --> 00:00:52.750 line:90%,end So you just subscribe to something 00:00:52.750 --> 00:00:54.840 line:90%,end like adblock.dns, and it pretty 00:00:54.840 --> 00:00:56.800 line:90%,end much -- they maintain their own ad 00:00:56.800 --> 00:00:58.760 line:90%,end block functionality on the list. 00:00:58.760 --> 00:01:00.210 line:90%,end So any time you hit some kind 00:01:00.210 --> 00:01:01.410 line:90%,end of DNS query that's part 00:01:01.410 --> 00:01:03.010 line:90%,end of an ad company, they block it. 00:01:03.010 --> 00:01:05.010 line:90%,end They do the same thing with an extended, 00:01:05.010 --> 00:01:06.820 line:90%,end which includes trackers and malware, 00:01:06.820 --> 00:01:08.320 line:90%,end and they also do a family one, 00:01:08.320 --> 00:01:09.850 line:90%,end which I was using, which includes 00:01:09.850 --> 00:01:11.400 line:90%,end adult sites, gambling, and they 00:01:11.400 --> 00:01:13.000 line:90%,end even have a social media one, and you 00:01:13.000 --> 00:01:14.800 line:90%,end can kind of pick your configuration. 00:01:14.800 --> 00:01:16.670 line:90%,end Instead, they are moving to Quad9, 00:01:16.670 --> 00:01:18.100 line:90%,end which is another wonderful service. 00:01:18.100 --> 00:01:19.340 line:90%,end In fact, we just interviewed them. 00:01:19.340 --> 00:01:20.960 line:90%,end They're a great DNS provider, and they 00:01:20.960 --> 00:01:22.620 line:90%,end just had a really unfortunate ruling 00:01:22.620 --> 00:01:24.180 line:90%,end in France, so make sure to check out 00:01:24.180 --> 00:01:26.230 line:90%,end that interview to learn more about what's 00:01:26.230 --> 00:01:27.920 line:90%,end going on there in the DNS space. 00:01:28.860 --> 00:01:31.120 line:90%,end To start, are you affected by this? 00:01:31.120 --> 00:01:32.820 line:90%,end First, if you're using the Mullvad 00:01:32.820 --> 00:01:35.600 line:90%,end Browser, which is their dedicated browser, 00:01:35.600 --> 00:01:38.560 line:90%,end on default settings, it switches to Quad9 00:01:38.560 --> 00:01:40.590 line:90%,end automatically, so there's nothing to do. 00:01:40.590 --> 00:01:42.140 line:90%,end So I open Mullvad Browser here. 00:01:42.140 --> 00:01:43.940 line:90%,end I went to Privacy and Security. 00:01:43.940 --> 00:01:45.080 line:90%,end I scroll down. 00:01:45.080 --> 00:01:46.860 line:90%,end My assumption here is that because 00:01:46.860 --> 00:01:47.860 line:90%,end this is the default, 00:01:47.860 --> 00:01:49.510 line:90%,end it's going to automatically migrate 00:01:49.510 --> 00:01:51.420 line:90%,end to Quad9 on November second. 00:01:51.420 --> 00:01:52.870 line:90%,end Um, so that is what I'm going 00:01:52.870 --> 00:01:54.520 line:90%,end to be doing with Mullvad Browser. 00:01:54.520 --> 00:01:57.460 line:90%,end If you use Mullvad VPN, just the regular 00:01:57.460 --> 00:01:59.780 line:90%,end VPN service, you're paying for it, 00:02:00.060 --> 00:02:01.920 line:90%,end that is not going to change either. 00:02:01.920 --> 00:02:04.200 line:90%,end They're still going to have their own DNS, 00:02:04.200 --> 00:02:07.200 line:90%,end Mullvad's own DNS, but for VPN subscribers 00:02:07.200 --> 00:02:09.020 line:90%,end accessible through the VPN service. 00:02:09.020 --> 00:02:10.538 line:90%,end So doesn't impact anybody 00:02:10.538 --> 00:02:13.400 line:90%,end who only uses the VPN with Mullvad DNS. 00:02:13.400 --> 00:02:15.100 line:90%,end Now, of course, it should go 00:02:15.100 --> 00:02:16.710 line:90%,end without saying, if you used any 00:02:16.710 --> 00:02:18.460 line:90%,end of these in any context, whether it 00:02:18.460 --> 00:02:20.140 line:90%,end was, like, Android's private DNS 00:02:20.140 --> 00:02:23.070 line:90%,end or you set it up on iOS, macOS, desktop, 00:02:23.070 --> 00:02:25.010 line:90%,end anywhere that you could have configured 00:02:25.010 --> 00:02:27.540 line:90%,end this manually, that needs to change. 00:02:27.540 --> 00:02:29.840 line:90%,end If you typed, again, this Mullvad DNS 00:02:29.840 --> 00:02:32.770 line:90%,end address, any of these anywhere yourself, 00:02:32.770 --> 00:02:34.260 line:90%,end this is what we need to change. 00:02:34.260 --> 00:02:36.160 line:90%,end And so let's get into the alternatives 00:02:36.160 --> 00:02:37.700 line:90%,end because I stumbled 00:02:37.700 --> 00:02:39.050 line:90%,end on some interesting things. 00:02:40.400 --> 00:02:43.670 line:90%,end If you just need a private DNS provider, 00:02:43.670 --> 00:02:45.680 line:90%,end like all you care about -- You don't care 00:02:45.680 --> 00:02:46.520 line:90%,end about the filtering. 00:02:46.520 --> 00:02:48.060 line:90%,end You just need a new DNS provider 00:02:48.060 --> 00:02:49.230 line:90%,end to process your queries, 00:02:49.230 --> 00:02:50.680 line:90%,end and you don't want filtering, 00:02:50.680 --> 00:02:52.000 line:90%,end I would go with what Mullvad 00:02:52.000 --> 00:02:53.420 line:90%,end is recommending, which is Quad9. 00:02:53.420 --> 00:02:55.420 line:90%,end This would've been my suggestion anyway. 00:02:55.420 --> 00:02:56.760 line:90%,end They're a great service, 00:02:56.760 --> 00:02:58.620 line:90%,end and they're very privacy-respecting. 00:02:58.620 --> 00:03:00.470 line:90%,end But all they do is filter malware. 00:03:00.470 --> 00:03:02.520 line:90%,end But if all you need is a new DNS provider 00:03:02.520 --> 00:03:04.440 line:90%,end that just processes queries, again, 00:03:04.440 --> 00:03:06.050 line:90%,end Quad9 is where I'd point you. 00:03:06.050 --> 00:03:08.050 line:90%,end Now, here's where things get interesting 00:03:08.050 --> 00:03:10.100 line:90%,end because I was trying to look for the best 00:03:10.100 --> 00:03:11.740 line:90%,end kind of like swap-in replacement 00:03:11.740 --> 00:03:14.380 line:90%,end to these already managed filters 00:03:14.380 --> 00:03:16.590 line:90%,end that are very easy, simple for you all, 00:03:16.590 --> 00:03:18.040 line:90%,end and actually what I was using 00:03:18.040 --> 00:03:19.840 line:90%,end because I like the simplicity of it. 00:03:19.840 --> 00:03:21.370 line:90%,end I liked how I could just subscribe 00:03:21.370 --> 00:03:23.160 line:90%,end to something with a well-maintained 00:03:23.160 --> 00:03:25.280 line:90%,end company, uh, that can pretty much 00:03:25.280 --> 00:03:27.330 line:90%,end maintain all those lists for you, 00:03:27.330 --> 00:03:29.380 line:90%,end and this is probably the next best thing. 00:03:29.380 --> 00:03:31.370 line:90%,end So Control D is actually run by the same 00:03:31.370 --> 00:03:33.400 line:90%,end team behind the VPN Windscribe. 00:03:33.600 --> 00:03:36.140 line:90%,end And what I didn't know until this happened 00:03:36.140 --> 00:03:37.760 line:90%,end is that they actually have free 00:03:37.760 --> 00:03:40.760 line:90%,end DNS servers that is very similar. 00:03:40.760 --> 00:03:42.860 line:90%,end As you can see here, they have unfiltered. 00:03:43.140 --> 00:03:44.260 line:90%,end They have malware protection. 00:03:44.260 --> 00:03:45.300 line:90%,end They have ads and tracking. 00:03:45.300 --> 00:03:46.340 line:90%,end They have a social one. 00:03:46.340 --> 00:03:47.500 line:90%,end They have family-friendly. 00:03:47.500 --> 00:03:48.920 line:90%,end The way this works is they just give 00:03:48.920 --> 00:03:50.570 line:90%,end you the same kind of domain here. 00:03:50.570 --> 00:03:52.480 line:90%,end So you have this copy to clipboard, 00:03:52.480 --> 00:03:55.100 line:90%,end same exact thing as Mullvad used to do. 00:03:55.100 --> 00:03:56.730 line:90%,end Overall, same concept, 00:03:56.730 --> 00:03:58.680 line:90%,end and they still have legacy IP addresses 00:03:58.680 --> 00:03:59.940 line:90%,end that you can use as well, though I would 00:03:59.940 --> 00:04:01.260 line:90%,end recommend using the secure ones. 00:04:01.260 --> 00:04:02.830 line:90%,end Important note on that in a second 00:04:02.830 --> 00:04:04.180 line:90%,end and why I'm not using this. 00:04:04.180 --> 00:04:05.780 line:90%,end No accounts needed to use these. 00:04:05.780 --> 00:04:07.700 line:90%,end Again, Control D is technically kind 00:04:07.700 --> 00:04:09.560 line:90%,end of a paid service for most things 00:04:09.560 --> 00:04:11.060 line:90%,end that you're gonna need it for. 00:04:11.060 --> 00:04:13.250 line:90%,end Um, but if all you needed was this, 00:04:13.250 --> 00:04:15.200 line:90%,end Control D is where I'd push you to now. 00:04:15.200 --> 00:04:16.720 line:90%,end So why am I not using this, you 00:04:16.720 --> 00:04:17.670 line:90%,end might be wondering. 00:04:17.670 --> 00:04:19.160 line:90%,end I actually tried to at first, 00:04:19.160 --> 00:04:21.010 line:90%,end but I had a very niche, weird thing, 00:04:21.010 --> 00:04:22.900 line:90%,end um, that I know a lot of you might have 00:04:22.900 --> 00:04:24.460 line:90%,end as well because a lot of you also use 00:04:24.460 --> 00:04:26.160 line:90%,end weird niche things like Tailscale. 00:04:26.160 --> 00:04:27.760 line:90%,end Tailscale is how I access things 00:04:27.760 --> 00:04:28.810 line:90%,end like my NAS behind me 00:04:28.810 --> 00:04:30.360 line:90%,end remotely anywhere in the world. 00:04:30.360 --> 00:04:32.260 line:90%,end It's also how I access my servers, 00:04:32.260 --> 00:04:34.060 line:90%,end um, that I can manage them remotely. 00:04:34.060 --> 00:04:36.040 line:90%,end So they actually have a pre-built 00:04:36.040 --> 00:04:37.520 line:90%,end option for Control D. 00:04:37.520 --> 00:04:39.800 line:90%,end You can literally click Add Name Server. 00:04:39.800 --> 00:04:41.160 line:90%,end You select Control D. 00:04:41.160 --> 00:04:44.120 line:90%,end But it requires a Control D ID. 00:04:44.520 --> 00:04:46.970 line:90%,end Uh, I tried, uh, for example, 00:04:46.970 --> 00:04:48.820 line:90%,end like, let's just say family-friendly. 00:04:48.820 --> 00:04:50.320 line:90%,end I tried using the resolver ID. 00:04:50.320 --> 00:04:51.470 line:90%,end Sadly, it doesn't work. 00:04:51.470 --> 00:04:52.960 line:90%,end It seems to require an actual 00:04:52.960 --> 00:04:55.480 line:90%,end account ID tied to a paid account. 00:04:55.480 --> 00:04:56.680 line:90%,end And so my only way 00:04:56.680 --> 00:04:58.380 line:90%,end to use Control D with these lists, 00:04:58.380 --> 00:04:59.680 line:90%,end which again is what I want 00:04:59.680 --> 00:05:02.040 line:90%,end to do within my Tailscale configuration, 00:05:02.040 --> 00:05:05.120 line:90%,end is to use the unencrypted legacy resolver, 00:05:05.120 --> 00:05:06.770 line:90%,end which I didn't want to do either. 00:05:06.770 --> 00:05:07.680 line:90%,end And because I wasn't able 00:05:07.680 --> 00:05:08.880 line:90%,end to get that working for myself, 00:05:08.880 --> 00:05:10.080 line:90%,end if any of you know how to get 00:05:10.080 --> 00:05:11.660 line:90%,end around that, please let me know. 00:05:11.660 --> 00:05:13.200 line:90%,end Um, I just wrote-- migrated back 00:05:13.200 --> 00:05:14.550 line:90%,end to NextDNS, which is what I used 00:05:14.550 --> 00:05:16.100 line:90%,end to use because NextDNS is also, 00:05:16.100 --> 00:05:17.900 line:90%,end like, built-in integrated, and you 00:05:17.900 --> 00:05:20.880 line:90%,end just put in your NextDNS ID, which I hid, 00:05:20.880 --> 00:05:23.220 line:90%,end uh, so you guys don't use my usage. 00:05:23.220 --> 00:05:25.780 line:90%,end And NextDNS sadly isn't 00:05:25.780 --> 00:05:28.240 line:90%,end as just, like, out-of-the-box maintained 00:05:28.240 --> 00:05:30.950 line:90%,end for you, um, as Mullvad is, and that's 00:05:30.950 --> 00:05:32.530 line:90%,end kind of what I was really chasing. 00:05:32.530 --> 00:05:33.580 line:90%,end And so I already made 00:05:33.580 --> 00:05:34.820 line:90%,end a whole NextDNS tutorial. 00:05:34.820 --> 00:05:36.460 line:90%,end A lot of you have already come forward 00:05:36.460 --> 00:05:38.020 line:90%,end and said that that is now outdated 00:05:38.020 --> 00:05:39.430 line:90%,end because they've introduced a lot 00:05:39.430 --> 00:05:41.380 line:90%,end of new features, which I learned myself 00:05:41.380 --> 00:05:43.180 line:90%,end when I was going through this whole, 00:05:43.480 --> 00:05:45.440 line:90%,end uh, saga that I'm telling you all about. 00:05:45.440 --> 00:05:46.920 line:90%,end Quick context I should have mentioned. 00:05:46.920 --> 00:05:48.770 line:90%,end My goal here was to keep things free, 00:05:48.770 --> 00:05:49.940 line:90%,end just like Mullvad DNS. 00:05:49.940 --> 00:05:51.840 line:90%,end So it's the fact that Control D's free 00:05:51.840 --> 00:05:53.840 line:90%,end resolvers can't be used with Tailscale's 00:05:53.840 --> 00:05:55.640 line:90%,end Control D option, uh, that is really 00:05:55.640 --> 00:05:57.380 line:90%,end the issue here because that requires 00:05:57.380 --> 00:05:59.080 line:90%,end what seems to be the paid account. 00:05:59.080 --> 00:06:01.000 line:90%,end So if paying isn't a deal breaker, 00:06:01.000 --> 00:06:03.100 line:90%,end Control D's paid plan works with Tailscale 00:06:03.100 --> 00:06:05.100 line:90%,end and is a completely good choice actually. 00:06:05.100 --> 00:06:06.140 line:90%,end But since I was trying 00:06:06.140 --> 00:06:07.930 line:90%,end to give you guys free options, that pushed 00:06:07.930 --> 00:06:10.560 line:90%,end me towards NextDNS, which has a free plan. 00:06:11.200 --> 00:06:13.100 line:90%,end So to summarize where we're at here, 00:06:13.100 --> 00:06:13.420 line:90%,end right? 00:06:13.420 --> 00:06:16.140 line:90%,end If, again, all you used Mullvad DNS 00:06:16.140 --> 00:06:17.720 line:90%,end for was to just have a private 00:06:17.720 --> 00:06:19.320 line:90%,end DNS provider that you can trust, 00:06:19.320 --> 00:06:20.920 line:90%,end I would point you towards Quad9, 00:06:20.920 --> 00:06:23.160 line:90%,end which is what they point you to as well. 00:06:23.160 --> 00:06:25.610 line:90%,end If you were using the filtering though, 00:06:25.610 --> 00:06:27.560 line:90%,end I would recommend starting with Control 00:06:27.560 --> 00:06:29.500 line:90%,end D's filters, which should work 00:06:29.500 --> 00:06:31.880 line:90%,end for like 99% of you I think. 00:06:31.880 --> 00:06:34.480 line:90%,end However, if there are some of you 00:06:34.480 --> 00:06:35.800 line:90%,end who use Tailscale 00:06:35.800 --> 00:06:37.920 line:90%,end and you want the secure resolver, 00:06:38.820 --> 00:06:41.330 line:90%,end I don't know for 100% certain, 00:06:41.330 --> 00:06:43.380 line:90%,end but it seems like it's not quite possible 00:06:43.380 --> 00:06:45.440 line:90%,end to do that in the context of Tailscale. 00:06:45.440 --> 00:06:46.620 line:90%,end And in that situation, 00:06:46.620 --> 00:06:49.220 line:90%,end you always have NextDNS or again, Control 00:06:49.220 --> 00:06:52.290 line:90%,end D's paid plan if free isn't a requirement. 00:06:52.290 --> 00:06:53.580 line:90%,end Overall, I just want you all 00:06:53.580 --> 00:06:54.840 line:90%,end to check your settings this week. 00:06:54.840 --> 00:06:56.180 line:90%,end Switch before November second 00:06:56.180 --> 00:06:57.800 line:90%,end so whatever you do is intentional 00:06:57.800 --> 00:06:58.950 line:90%,end and you're aware of it. 00:06:58.950 --> 00:07:00.700 line:90%,end And I wanna thank Mullvad also 00:07:00.700 --> 00:07:02.390 line:90%,end for at least funding Quad9 00:07:02.390 --> 00:07:03.520 line:90%,end in light of them shutting, 00:07:03.520 --> 00:07:04.460 line:90%,end shutting the service down, 00:07:04.460 --> 00:07:06.140 line:90%,end which I'm really sad about to be honest. 00:07:06.140 --> 00:07:06.760 line:90%,end I already talked 00:07:06.760 --> 00:07:08.150 line:90%,end about this in Surveillance Report. 00:07:08.150 --> 00:07:09.630 line:90%,end But I, I-- This is a service 00:07:09.630 --> 00:07:11.160 line:90%,end that I think was really important. 00:07:11.160 --> 00:07:12.200 line:90%,end I really liked using it, 00:07:12.200 --> 00:07:13.880 line:90%,end and I'm sad they're taking it away, 00:07:13.880 --> 00:07:15.060 line:90%,end but at least they're migrating 00:07:15.060 --> 00:07:16.910 line:90%,end to a really well-trusted organization 00:07:16.910 --> 00:07:18.960 line:90%,end and supporting that organization as well. 00:07:18.960 --> 00:07:20.100 line:90%,end And again, if you wanna learn 00:07:20.100 --> 00:07:21.770 line:90%,end more about Quad9, check out the interview 00:07:21.770 --> 00:07:23.620 line:90%,end I just did with John Todd from Quad9. 00:07:23.620 --> 00:07:24.980 line:90%,end It is a wonderful interview. 00:07:24.980 --> 00:07:26.330 line:90%,end And if you still have questions 00:07:26.330 --> 00:07:28.280 line:90%,end about DNS after leaving this video, 00:07:28.280 --> 00:07:30.330 line:90%,end we probably covered it in that interview, 00:07:30.330 --> 00:07:31.320 line:90%,end and you're gonna hear it from some 00:07:31.320 --> 00:07:32.690 line:90%,end of the best in the industry, 00:07:32.690 --> 00:07:34.350 line:90%,end which is John Todd at Quad9. 00:07:34.350 --> 00:07:35.520 line:90%,end See you at the interview. 00:07:35.520 --> 00:07:36.320 line:90%,end Thank you all for watching, 00:07:36.320 --> 00:07:38.020 line:90%,end and see you next time on Techlore.