# LibreDNS privacy rating

Public encrypted DNS resolver run by the volunteer LibreOps collective, with DoH and DoT endpoints and an optional ad-blocking endpoint.

## Summary

LibreDNS scores 65 out of 100 (grade C) on the DNS resolvers criteria. It meets 5 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration and Encrypted DNS. It partly meets security headers and no query logs. It does not meet independent audit, transparency report, tells users about requests and DNSSEC validation. It is based in Greece: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://libredns.gr
- Source code: https://gitlab.com/libreops/libredns/libredns-cfg
- Jurisdiction: Greece. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Home page trackers: none found
- Category: [DNS resolvers](https://privacyratings.com/dns-resolvers/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | The server deployment scripts are published under AGPL-3.0 and run open-source DNS software. | https://gitlab.com/libreops/libredns/libredns-cfg/-/blob/main/LICENSE |
| No trackers or telemetry | Yes | The website source is public and loads no analytics or third-party scripts. | https://gitlab.com/libreops/libredns/libredns.gr |
| No ads or data sales | Yes | Run by volunteers and funded by donations through Open Collective. No ads. | https://opencollective.com/libreops |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=libredns.gr&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=libredns.gr |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Encrypted DNS | Yes | DoH and DoT endpoints are both documented. | https://libredns.gr/ |
| No query logs | Partial | The site states logging is disabled for the DNS daemon. Not audited. | https://libredns.gr/ |
| DNSSEC validation | No | A test query for the deliberately broken dnssec-failed.org resolves normally, so DNSSEC is not validated. | https://doh.libredns.gr/dns-query?dns=AAABAAABAAAAAAABDWRuc3NlYy1mYWlsZWQDb3JnAAABAAEAACkQAAAAgAAAAA |

Source: https://privacyratings.com/dns-resolvers/libredns/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-resolvers/libredns.md