
CoreDNS
5.7#16 in dns server softwareFree planFree planLinuxSelf-hosted
Visit

| Fact | CoreDNS | Pi-hole |
|---|---|---|
| Security | The forward plugin supports TLS connections to upstream DNS servers and sets the minimum TLS version to TLS 1.2. | Pi-hole creates a self-signed certificate during installation to encrypt its web interface and API, though browsers do not trust that certificate by default. |
You want what its maker publishes above — check its page for the details.
Pi-hole suits people who want DNS-based content blocking for an entire network and can run software on supported Linux hardware or in Docker. It also fits users who want configurable filtering, query reporting, or API access.