# Cloudflare DNS vs deSEC: privacy compared

| Criterion | Cloudflare DNS | deSEC |
| --- | --- | --- |
| Grade | C (66/100) | B (77/100) |
| Jurisdiction | United States (Five Eyes) | Germany (Fourteen Eyes) |
| Open source | No | Yes |
| No trackers or telemetry | No | Yes |
| No ads or data sales | Yes | Yes |
| Independent audit | Partial | No |
| Transparency report | Yes | No |
| Tells users about requests | Yes | No |
| TLS configuration | Yes | Yes |
| Security headers | Partial | Yes |
| Modern web standards | Not tested yet | Not tested yet |
| DNSSEC | Yes | Yes |
| API access | Yes | Yes |
| Two-factor login | Yes | Yes |

**Cloudflare DNS.** Cloudflare DNS scores 66 out of 100 (grade C) on the DNS hosting criteria. It meets 7 of 11 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, DNSSEC, API access and two-factor login. It partly meets independent audit and security headers. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B+.

**deSEC.** deSEC scores 77 out of 100 (grade B) on the DNS hosting criteria. It meets 8 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, security headers, DNSSEC, API access and two-factor login. It does not meet independent audit, transparency report and tells users about requests. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

Source: https://privacyratings.com/compare/dns-hosting/cloudflare-dns-vs-desec/