DNS resolvers
OpenDNS privacy rating
Public DNS resolver from Cisco at 208.67.222.222 and 208.67.220.220, with optional content filtering and a free home account for managing filters.
Summary
OpenDNS scores 37 out of 100 (grade F) on the DNS resolvers criteria. It meets 4 of 11 criteria: no ads or data sales, transparency report, tells users about requests and DNSSEC validation. It partly meets TLS configuration and Encrypted DNS. It does not meet open source, no trackers or telemetry, independent audit, security headers and no query logs. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade D-.
Score 37 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The Cisco privacy statement used by the site allows third-party advertising and analytics cookies.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
The free service is backed by Cisco's paid security products. Cisco states it does not sell personal data.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Cisco publishes counts of law enforcement and national security requests twice a year.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Cisco states it notifies customers before producing data to a government unless the law prohibits it.
-
Partial
Encrypted DNS Weight 3 of 3
Are DNS over HTTPS and DNS over TLS supported?
DNS over HTTPS answers at doh.opendns.com. No current documentation for DNS over TLS is published.
-
No
No query logs Weight 3 of 3
Are queries stored without IP addresses, and is this independently audited?
No policy states that queries are kept without IP addresses. The Cisco privacy statement allows retention as long as business needs require.
-
Yes
DNSSEC validation Weight 1 of 3
Does the resolver validate DNSSEC?
A test query for the deliberately broken dnssec-failed.org returns SERVFAIL, showing validation.
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A-
-
No
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade D- (25/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.