DNS resolvers
Unbound privacy rating
Validating, recursive and caching DNS resolver from NLnet Labs for running your own resolver, with DNS over TLS and DNS over HTTPS support.
Summary
Unbound scores 85 out of 100 (grade B) on the DNS resolvers criteria. It meets 5 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, Encrypted DNS and DNSSEC validation. It partly meets independent audit and no query logs. It is based in the Netherlands: Nine Eyes member; EU member (GDPR). Automated tests: Mozilla HTTP Observatory grade B.
Score 85 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Developed by a non-profit foundation funded by donations and support contracts. No ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
The full X41 D-Sec audit report is older than three years.
-
Yes
Encrypted DNS Weight 3 of 3
Are DNS over HTTPS and DNS over TLS supported?
DNS over TLS and DNS over HTTPS are supported.
-
Partial
No query logs Weight 3 of 3
Are queries stored without IP addresses, and is this independently audited?
Query logging is off by default and controlled by whoever runs the resolver. Not audited.
-
Yes
DNSSEC validation Weight 1 of 3
Does the resolver validate DNSSEC?
Unbound is a validating resolver.