DNS: the link nobody hardens
DoH/DoT actually explained. Resolver choice: Quad9, NextDNS, Cloudflare, Mullvad, self-hosted. Local filtering without illusions.
04 / 06
VPN, public Wi-Fi, DNS, eSIM: what was sold to you vs what actually protects you.
Connectivity is the area where marketing has done the most damage to public discourse. NordVPN “protecting your online identity”, public Wi-Fi presented as a deadly trap, DNS as an invisible detail. All of this deserves an honest examination.
This axis breaks down what each network layer actually protects, where HTTPS changed the game, where a VPN still serves a purpose (and where it does not), how to harden your DNS without illusion, and how eSIM transforms travel connectivity management.
DoH/DoT actually explained. Resolver choice: Quad9, NextDNS, Cloudflare, Mullvad, self-hosted. Local filtering without illusions.
Why HTTPS changed the game. Residual real threats (captive portals, ARP spoofing, evil twin). Pragmatic routine.
Technical mechanics. Smart purchases: Airalo, Saily, Holafly, local. Carrier tracking implications. Multi-eSIM as a strategy.
Threat model breakdown. What a VPN actually protects, what it doesn't touch. NordVPN, ExpressVPN, Mullvad, AirVPN, self-hosted: which serves what purpose.