From 84330e1416bcf7495b97586e9977e5dc3606e990 Mon Sep 17 00:00:00 2001 From: yokoffing <11689349+yokoffing@users.noreply.github.com> Date: Sat, 29 Mar 2025 13:24:00 -0400 Subject: [PATCH] security features disclaimers https://github.com/yokoffing/NextDNS-Config/issues/74 --- README.md | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 2f0cbc0..322bb7d 100644 --- a/README.md +++ b/README.md @@ -15,18 +15,22 @@ Sign up for NextDNS [here](https://nextdns.io/?from=xujj63g5) and support this p Security settings protect your data from harm, theft, and unauthorized use.*^[why does this matter?](https://thenewoil.org/en/guides/prologue/why)* ## Threat Intelligence Feeds [1](https://github.com/nextdns/metadata/blob/6f9b6cd0670e7e31ad2ca716742088c2fc0616c2/security/threat-intelligence-feeds.json) -![Enabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/enabled.svg) Use Threat Intelligence Feeds -## AI-Driven Threat Detection [1](https://x.com/NextDNS/status/1440291577713233925) -> [!NOTE] -> NextDNS labels this feature as [beta](https://www.vocabulary.com/dictionary/beta), although most users report it works well. +> [!CAUTION] +> Leave this feature enabled if you use something other than the [recommended blocklists](https://github.com/yokoffing/NextDNS-Config#privacy-lock) (see https://github.com/yokoffing/NextDNS-Config/issues/74). -![Enabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/enabled.svg) Enable AI-Driven Threat Detection +![Disabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/disabled.svg) Use Threat Intelligence Feeds + +## AI-Driven Threat Detection [1](https://x.com/NextDNS/status/1440291577713233925) + +NextDNS labels this feature as [beta](https://www.vocabulary.com/dictionary/beta), although most users report it works well. + +![Disabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/disabled.svg) Enable AI-Driven Threat Detection ## Google Safe Browsing [1](https://safebrowsing.google.com/safebrowsing/report_general/) [2](https://blog.cryptographyengineering.com/2019/10/13/dear-apple-safe-browsing-might-not-be-that-safe/) [3](https://the8-bit.com/apple-proxies-google-safe-browsing-privacy/) [4](https://github.com/brave/brave-browser/wiki/Deviations-from-Chromium-(features-we-disable-or-remove)#services-we-proxy-through-brave-servers) -> [!TIP] -> Unlike the version embedded in some browsers, this feature does not associate your public IP address to threats and does not allow bypassing the block. +> [!CAUTION] +> Google Safe Browsing wasn't designed as a DNS-level blocker and may flag legitimate [CNAME domains](https://en.wikipedia.org/wiki/CNAME_record) as scams. NextDNS can also take months to remove a [false positive](https://csrc.nist.gov/glossary/term/false_positive). -![Enabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/enabled.svg) Enable Google Safe Browsing +![Disabled](https://raw.githubusercontent.com/yokoffing/NextDNS-Config/main/icons/disabled.svg) Enable Google Safe Browsing ## Cryptojacking Protection [1](https://github.com/nextdns/metadata/blob/6f9b6cd0670e7e31ad2ca716742088c2fc0616c2/security/cryptojacking.json) > [!CAUTION]