Just saying OP, if they go that far in messing with your DNS you have to start getting seriously concerned. When you can't trust your DNS you can't trust anything you get online. HTTPS becomes meaningless, downloads and even software updates can be backdoored VERY easily.
DNSCrypt protects only one hop, which means it's the hop to your ISP. "protects" in the sense that it can't be sniffed from the local network (e.g. your mom can't see you're looking up 4chan's address). It doesn't do anything against MITM. You'd need a DNSSEC verifier if you want to be safe from an upstream attacker, except that 4chan, porn, and torrents don't have DNSSEC keys.
What you CAN do is put 4chan, porn and torrents in your hosts.txt. Only you, microsoft and software updates can fuck up your hosts.txt so it's relatively safe.
>>263966>My ISP is blocking certain websites>I don't really need the security of VPNsChoose one, OP. If your ISP is messing with your connections you need the security of a VPN. That is literally one of the only two uses VPN was designed for.
If you have a countrywide censorship problem you may want to try anonymising overlay networks like Tor and I2P instead of just a VPN.
