Inspired by this DNS malware-blocking comparison, I’ve slightly modified the script provided and added in CIRA’s Canadian Shield and re-ran it to see how it fares with others.
Traditional DNS queries (mapping a domain name to an IP address) are sent in plain-text and are not private. Enabling DNS-over-TLS on your router will help ensure the DNS queries remain private for all your devices at home.
With the release of two DNS resolvers: Cloudflare 1.1.1.1 for Families and CIRA Canadian Shield, I decided to do a quick test of these two in addition to Quad9.
Cloudflare’s 1.1.1.1 WARP VPN (free, unlimited bandwidth) is only officially supported via their mobile apps currently, but there is a way to have your other devices use the WARP network.