From 5268ba1d9a8be6a3988d874bb18b5c70496c4e1d Mon Sep 17 00:00:00 2001 From: mayfrost Date: Fri, 4 May 2018 23:46:54 +0000 Subject: [PATCH] Update SECURITY.md --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 31fd5fc..bd06eeb 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -31,7 +31,7 @@ Not necessarily meant to be followed step by step, although it is recommended. S * __Level 13__: Use Uncomplicated Firewall to block inbound AND outbound network traffic, permitting only what you need. * __Level 14__: Use Firejail or Bubblewrap to sandbox your applications. * __Level 15__: When possible give your applications a separate user account and use sudo, chroot, fakeroot, ulimit and quota with them. -* __Level 16__: Use DNSCrypt to prevent DNS Leaking with an OpenNIC provider known to not save logs. +* __Level 16__: Use [BIND9 with DNSCrypt](https://unix.stackexchange.com/questions/270716/configure-bind-as-forwarder-only-no-root-hints-encrypted-rpz-blacklist-wh/270796#270796) to prevent DNS Leaking with an [OpenNIC provider](https://servers.opennicproject.org/) known to not save logs. * __Level 17__: Use YaCy with collaborative database disabled when in need to search on the web. * __Level 18__: Use the Tor Browser to navigate the internet through Tor. * __Level 19__: Encrypt your e-mails with GnuPG. Thunderbird has the Enigmail plugin for this, you can script the use of GPG on Mutt.