

Message in a bottle is the way to go.
If hackers don’t know where the bottle is floating, they can’t read the message. It’s also completely disconnected from the Internet, further enhancing the already robust security. This protocol also supports all encryption methods you can fit inside the bottle. There’s no central authority, no servers, no licenses, and no EULAs to accept without reading.
The only bottlenecks are bandwidth, packet loss, and the physical dimensions of the glass container.
Before clicking, I already knew this would lead to NextDNS. Turns out, my experiences were quite similar. Sadly, my beloved RPI is just sitting idle these days. Maybe I’m just a bad admin, and that caused my problems. Probably…
Anyway, I really prefer to use SAAS for this purpose. You could use any DNS you like, doesn’t have to be this one. If you’re the kind of pi admin who has the time and energy, running your own pi-hole is still probably the best option though.