this post was submitted on 22 Feb 2025
76 points (100.0% liked)

Buy Canadian

884 readers
172 users here now

A community dedicated to buying Canadian products.

founded 2 years ago
MODERATORS
 

CIRA Canadian Shield

Protect your family with the same advanced technology that protects Canadian organizations—for free. CIRA Canadian Shield double checks to see if websites are malicious and if we know they are, we’ll stop you from visiting them.

The service is completely free, meaning no advertising, no tracking and no reselling your data to others.


Configuration Guide

Three options for your DNS

  1. Private: Offering DNS resolution only
  2. Protected: Adds malware, phishing, botnet and scam protection
  3. Family: Adds pornographic content to the block list

Canadian Shield is available to be set up both for entire networks or on a variety of devices and platforms.

To protect devices while they are connected to your home internet, CIRA recommends setting up CIRA Canadian Shield on your router/gateway as this will protect your whole network.


Frequently Asked Questions

What is the DNS?The DNS standard is as old as the world-wide-web itself (remember when we called it that!) It is a massively redundant hierarchical system of databases that is used to correlate human readable domain names with the IP addresses of the servers where websites and applications live. It is designed to ensure 100% availability for the Internet’s critical infrastructure. It looks like this:

www.cira.ca –> 52.60.203.65

Most households don’t think about the DNS and stick with whatever their ISP has pre-configured but there are many options available for those that choose to use a different service to handle their queries. The CIRA Canadian Shield is one such option.

If you want to get really deep then please read our resource on how the DNS works or see the full glossary of terms.

How is CIRA Canadian Shield different from a Virtual Private Network (VPN) and will it work with my VPN?

The core benefit of CIRA Canadian Shield is that it blocks malware and phishing using the DNS. While it does offer options for DNS encryption it does not encrypt all traffic and so is not a replacement for those looking for a full VPN.

The exception is for those looking for a mobile VPN specifically for browser-based traffic over HTTP while on public networks. In this instance, the mobile application has an option, called “Secure WiFi” that is a paid upgrade and will encrypt all non-HTTPs traffic when on public WiFi networks.

Please note that if you are using a VPN then the CIRA Canadian Shield will not be providing DNS service, including protection, while you are on the VPN.

top 17 comments
sorted by: hot top controversial new old
[–] Croquette@sh.itjust.works 1 points 11 minutes ago

I stumbled upon CIRA DNS this week it's nice to see people using it and having good comments about it.

[–] SplashJackson@lemmy.ca 3 points 9 hours ago
[–] masterofn001@lemmy.ca 5 points 10 hours ago* (last edited 10 hours ago) (1 children)

CIRA is the Canadian registrar. I use them here and there. They have some good and interesting free tools on their site as well.

Another great Canadian Secure DNS provider is Control-D. Their free DNS has user customizable configurations you can use depending on your want / need.

Block porn? OK. Block social and gov sites? Cool. Completely uncensored? No problem. Block porn, gambling, phishing, gov, and social? Yep

Block porn, gambling, phishing, gov, and social, tracking, ads, and malware? You betcha.

Seriously I love this one. (When I can't use an anonymozing dnscrypt-proxy)

https://controld.com/free-dns

[–] Slax@sh.itjust.works 1 points 1 hour ago

Privacy Guides recommends Control D as well.

https://www.privacyguides.org/en/dns/

[–] Drdul@lemm.ee 6 points 11 hours ago

I’ve been using the CIRA Protected DNS service for a couple of years without issue. I tested the speed at https://dnsspeedtest.online/ and CIRA Canadian Shield has the lowest median response time for me here in Vancouver.

[–] wirebeads@lemmy.ca 6 points 13 hours ago (1 children)

This is amazing. I’ve been using cloud flare for years but it’s super great to know there’s a Canadian version of this out there.

I’ve updated my router and will see how it works. With the family DNS seems to do a good job of blocking unwanted sites so far.

Thanks Internet stranger!!

[–] AlolanVulpix@lemmy.ca 2 points 13 hours ago

You're welcome, other internet stranger (who is presumably Canadian)!

[–] Reannlegge@lemmy.ca 2 points 13 hours ago (2 children)

I love this however, I run my own mDNS server on my LAN via pihole. I have used my pihole to block ads as it is ment to do but I am also blocking US services I may try to use to get a dopamine hit (like Reddit).

[–] InEnduringGrowStrong@sh.itjust.works 3 points 10 hours ago (2 children)

You can still use this one as your upstream in pihole itself

[–] Reannlegge@lemmy.ca 1 points 8 hours ago (1 children)

I use unbound so I have no idea how to do that.

[–] OminousOrange@lemmy.ca 2 points 7 hours ago (1 children)

I'm going to investigate more tomorrow, but it looks like you can add a forward zone to your unbound.conf to specify which upstream servers to use.

[–] Reannlegge@lemmy.ca 1 points 6 hours ago

Thank you, I would if I had the time to learn more about it.

[–] AlolanVulpix@lemmy.ca 1 points 10 hours ago

That's a great idea!

[–] wirebeads@lemmy.ca 1 points 12 hours ago

I also enjoy pihole.

[–] wise_pancake@lemmy.ca 12 points 20 hours ago

Love this community, I’m learning about a ton of new Canadian things this month

[–] isVeryLoud@lemmy.ca 3 points 15 hours ago

CIRA is awesome, I set their DoH service as my DNS provider at the router level at home.

[–] LimpRimble@lemmy.ca 5 points 17 hours ago

For Canadian Firefox users, DNS over HTTPs is enabled by default using CIRA Canadian Shield – private.