Stubby

Among many other things, DNS allows your computer to find the actual IP addresses and associate them with a particular website. What this means is that the DNS request can be a source of information leak to anyone who would minutely inspect your traffic, especially since this information is not encrypted. Stubby is a lightweight piece of software designed to act as a local DNS privacy stub resolver via a DNS-over-TLS method.

The program does not come with a GUI, but rather you need to launch it via PowerShell or Command Line. The tool runs as a daemon listening on the loopback addresses and is configured to send all the outgoing queries received from those addresses via TLS, meaning an encrypted connection.

It is worth mentioning that once you get the tool up and running, all the DNS queries are going to be re-directed to the app and send over the TLS. If you want to check out the modifications yourself, then you can employ apps such as Wireshark and monitor the default port 853. As a side note, you may need to restart the tool along with other programs that require an Internet connection so they pick up the new network settings.

While the app comes with a separate configuration file, you should bear in mind that you can also create a custom one where you can specify additional privacy servers or perhaps change the port.

The default configuration file includes the settings for a strict private mode and that it can spread the DNS queries among several of the current DNS Privacy test servers. Nevertheless, you can change the settings if they do not suit your needs or perhaps if they interfere with other apps and services.

If you value your privacy and would like to make sure nobody can extract information from your online activities, including the DNS queries, then perhaps you can consider giving Stubby a try.