E-Mail Service

Fast and safe communication with modern transport and DNS security.

Transport-Sicherheitskette Reihenfolge: DNSSEC, MTA-STS (enforce), TLS 1.3, SPF/DKIM/DMARC. DANE optional. DNSSEC MTA-STS (enforce) TLS 1.3 (PFS) SPF / DKIM DMARC
Transport always encrypted (no plaintext fallback, no STARTTLS downgrade).
TLS 1.3 (PFS) secured DNSSEC MTA-STS enforce SPF/DKIM/DMARC
Safety details
  • MTA-STS: Mode enforce No plaintext, no STARTTLS stripping.
  • DNSSEC: ECDSA P-256 signed zone
  • TLS 1.3: Perfect Forward Secrecy
  • SPF/DKIM/DMARC: correct alignment, protection against spoofing and abuse.


Smart DNS (DoT/DoH)

DoT: random.adg.eridium.xyz
DoH: random.doh.adg.eridium.xyz
* The random is not client-bound; everyone shares the same access.
FR / DE Infrastructure IPv6 / DS-Lite DNSSEC Validation No ECS Leakage QNAME Minimization Encrypted Upstream (DoH) Closed Resolver
Ad & Tracker Blocking Phishing & Malware Protection Scam & Crypto Protection Telemetry & Pop-Up Mitigation
Rebinding Protection Encrypted DNS Access Adaptive Caching
AI Abuse Filtering Low Failure Rate
Schnell‑Setup
Note: All access is treated as a single shared client; device and IP attribution is not available.
Android [DoT Fallback]
  1. Settings → Network & Internet → Advanced → Private DNS
  2. Select Private DNS provider hostname
  3. Enter: random.adg.eridium.xyz
Note: Use DoH via profile if available. Private DNS uses DoT only.
Android [DoH Preferred]
Install a DNS configuration profile (MDM / custom profile).

DoH endpoint: https://random.doh.adg.eridium.xyz/dns-query System-wide encryption. Recommended over DoT when possible.
iOS / iPadOS [DoH Preferred]
Settings → General → VPN & Device Management → Install DNS profile.

DoH: https://random.doh.adg.eridium.xyz/dns-query
Manual Wi-Fi DNS only supports unencrypted DNS.
Linux [DoT]
  • systemd-resolved:
    DNSOverTLS=yes
    DNS=random.adg.eridium.xyz
  • Alternative: stubby or unbound as DoT forwarder.
Linux Desktop (NetworkManager - DoH Preferred)
NetworkManager does not natively support DoH.
Recommended:
  • Run cloudflared or dnscrypt-proxy locally
  • Forward to: https://random.doh.adg.eridium.xyz/dns-query
macOS [DoH Preferred]
Create or install a DNS profile via Apple Configurator.

DoH: https://random.doh.adg.eridium.xyz/dns-query
System-wide. No native GUI-based DoT/DoH entry.
Smart TVs & Consoles
  1. Open network settings
  2. Set DNS manually → enter router IP
  3. Router must act as DoH/DoT forwarder
Most devices support only classic DNS. Encryption must be handled by router.
Router / Firewall
  1. OpenWrt: Install stubby, unbound or https-dns-proxy
  2. pfSense / OPNsense: DNS Resolver → Forwarding Mode
  3. Upstream:
    DoH: https://random.doh.adg.eridium.xyz/dns-query
    DoT: random.adg.eridium.xyz
DoH preferred. DoT optional fallback.
Windows 11 [DoH Preferred]
  1. Settings → Network & Internet → Adapter
  2. Set DNS to Manual
  3. Encryption: Encrypted only (DNS over HTTPS)
  4. Provider: https://random.doh.adg.eridium.xyz/dns-query
Chromium / Brave / Edge / Opera [DoH]
Settings → Privacy & Security → Use Secure DNS

Custom: https://random.doh.adg.eridium.xyz/dns-query
Firefox / Mullvad Browser [DoH]
about:config →
network.trr.mode = 3
network.trr.uri = https://random.doh.adg.eridium.xyz/dns-query

Optional: network.trr.bootstrapAddress = <resolver IP>
Docker
Docker does not support DoH/DoT directly.
Recommended:
  • Run local DoH proxy container
  • Set Docker daemon.json: "dns": ["127.0.0.1"]
Kubernetes (CoreDNS)
Edit CoreDNS ConfigMap:
Forward to DoH proxy or DoT upstream.
Recommended: local DoH sidecar.
WireGuard (Split DNS)
In client config:
DNS = random.adg.eridium.xyz
Or use local DoH resolver IP.
Recommendation:Prefer DoH where supported. DoT is a solid fallback. Router-level encryption increases CPU load and latency. Endpoint configuration is recommended when possible.