Is it better to use my isp dns server or a public one like cloudflare? I’ve noticed that my isp dns servers are slightly faster according to ping tests but they fail the dnssec signature test, while cloudflare and Google dns pass all signature tests using dnssec standards. The difference in speeds isn’t really noticeable, but I’m wandering about security and privacy.
I run pfsense which has unbound build in which I forward to nextdns for adblocking/malware, also there server(s) are relatively close so I get under 20ms.
For a couple other homes I manage I have unbound installed on two of the raspberry pi’s the host the controllers at their homes and just forward to nextdns under their own profile, one user uses their nextdns cli client but I plan to move them to unbound the next time I am here.