On 2019/10/24 11:48, Paul de Weerd wrote: > The downside of using your own resolver (e.g. by running unbound on > your laptop), its traffic is more easily tied to a specific user. > There's an anonymizing power in using a bigger (shared) resolver (with > the downside that you then give your queries to a resolver that's > probably outside of your control - different risks and all that)
And the downside of using a shared non-ISP resolver is that CDNs or services using geolocation on the DNS requests won't have information about your network location, so you may end up served by a suboptimal server or CDN node (in the worst case you may end up with a very unsuitable one, for example perhaps from a country halfway around the world). The notable exception here of course is where the CDN also runs their own public DNS resolver (hi Cloudflare!).