Learn more about DNS Recommended Providers ¶ DNS Providerīased on server choice. Encrypted DNS will not help you hide any of your browsing activity. (c) if not, can I somehow cajole DNScrypt to write correct bypass files when I put bypass domains into the config in the DNScrypt pref pane on OSX.Encrypted DNS with third-party servers should only be used to get around basic DNS blocking when you can be sure there won't be any consequences. (b) if not, can I somehow prevent DNScrypt from scribbling all over the files I put in /etc/resolver? (a) am i doing something wrong/stupid and there's a better way to accomplish bypass for domains with split-horizon DNS? So, I create this file, but every time DNSCrypt turns on or off it gets blown away. What I'd like to have is an /etc/resolver/ file which forces DNScrypt to bypass to the internal DNS servers. Well, my company uses split horizon DNS (don't vomit) so *some* names ending in the company domain are't resolvable unless you're inside the perimeter (directly or via VPN, which of course also tries to screw around with your DNS settings).

Now, if it just left manually-configured bypasses alone I'd be fine with that, but it overrides anything in that directory every time the config changes. It inserts the DNS resolver address of my home router into etc/resolver/* files when that's flat out wrong for the bypasses I need.

Why do I care? Well, it's because this is how DNScrypt configures bypasses, but it's doing it wrong. Every time DNScrypt on OSX changes its config, it scribbles all over /etc/resolver with a bunch of domain-specific resolver config files, most of which are for weird domains.

Opendns dnscrypt resolver