# Unbound privacy rating

Validating, recursive and caching DNS resolver from NLnet Labs for running your own resolver, with DNS over TLS and DNS over HTTPS support.

## Summary

Unbound scores 85 out of 100 (grade B) on the DNS resolvers criteria. It meets 5 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, Encrypted DNS and DNSSEC validation. It partly meets independent audit and no query logs. It is based in the Netherlands: Nine Eyes member; EU member (GDPR). Automated tests: Mozilla HTTP Observatory grade B.

- Website: https://nlnetlabs.nl/projects/unbound/about/
- Source code: https://github.com/NLnetLabs/unbound
- License: BSD-3-Clause
- Jurisdiction: Netherlands. Nine Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [DNS resolvers](https://privacyratings.com/dns-resolvers/)
- Grade: B (85/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | BSD-3-Clause. | https://github.com/NLnetLabs/unbound/blob/master/LICENSE |
| No trackers or telemetry | Yes | No telemetry or analytics in the source code. | https://github.com/NLnetLabs/unbound |
| No ads or data sales | Yes | Developed by a non-profit foundation funded by donations and support contracts. No ads. | https://nlnetlabs.nl/about/ |
| Independent audit | Partial | The full X41 D-Sec audit report is older than three years. | https://ostif.org/wp-content/uploads/2019/12/X41-Unbound-Security-Audit-2019-Final-Report.pdf |
| Encrypted DNS | Yes | DNS over TLS and DNS over HTTPS are supported. | https://nlnetlabs.nl/projects/unbound/about/ |
| No query logs | Partial | Query logging is off by default and controlled by whoever runs the resolver. Not audited. | https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html |
| DNSSEC validation | Yes | Unbound is a validating resolver. | https://nlnetlabs.nl/projects/unbound/about/ |

Source: https://privacyratings.com/dns-resolvers/unbound/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-resolvers/unbound.md