How can I have a local system-wide #DNS proxy to a trusted (by me) DNS-over-HTTPS endpoint on #Debian (or #Devuan) #GNU / #Linux.

I know how to configure firefox to this aim, but I'd want the system resolver to do the same.

#fedihelp #DoH #sysadmin

Today I've been really busy and I'm exhausted, but I wanted to share the "gem" of the day.
A colleague (whom I've never spoken to before) calls me and explains that they need to connect a client's server with their management system. To communicate, the client's server needs to be reachable via telnet. I explain that I can't open telnet to the world, but if necessary, I can set up a VPN of their choice (Wireguard, OpenVPN, even Zerotier if it's helpful) and grant telnet access through the VPN. Not ideal, but better than nothing...

That said, the colleague attacks me: "Here you are, with these VPNs - don't you understand they're used to spy on us? Governments intercept all VPNs to steal our personal data." I try to clarify that I may not have explained myself well and that I don't mean using the famous commercial VPNs, but a private VPN access to allow the two machines to communicate securely. No luck: "Haven't you realized yet? Every time we open a VPN, they know and intercept us."

Frankly, I was speechless...

#VPN #Privacy #Security #Misconceptions #IT #SysAdmin #ITHorrorStories