Suggestion: reword bootstrap resolvers section

[mvevitsis]

Based on my interactions with the developer of inviZible, it seems that many do not understand that the bootstrap resolvers are not necessary if you use a stamp that includes the IP address for your server.

By removing/commenting out the bootstrap resolvers line (or setting them to loopback, null, 0.0.0.0, etc.) you can ensure that, even if for some reason you are unable to connect to your chosen resolver, the proxy will fail to connect instead of sending a request on port 53.

While this is a minor improvement in privacy/security, it's still worth mentioning, since on unrooted Android devices for example you cannot block port 53 (especially problematic for WWAN).

So my suggestion is to clarify with something like
'you can comment out this line or set these to an invalid address (e.g. 127.0.0.1:53) if you use a DNS stamp that already contains an IP address'

[lifenjoiner]

dnscrypt-proxy/dnscrypt-proxy/example-dnscrypt-proxy.toml

Lines 241 to 256 in de16f22

	## Bootstrap resolvers
	##
	## These are normal, non-encrypted DNS resolvers, that will be only used
	## for one-shot queries when retrieving the initial resolvers list and if
	## the system DNS configuration doesn't work.
	##
	## No user queries will ever be leaked through these resolvers, and they will
	## not be used after IP addresses of DoH resolvers have been found (if you are
	## using DoH).
	##
	## They will never be used if lists have already been cached, and if the stamps
	## of the configured servers already include IP addresses (which is the case for
	## most of DoH servers, and for all DNSCrypt servers and relays).
	##
	## They will not be used if the configured system DNS works, or after the
	## proxy already has at least one usable secure resolver.

Read it carefully. Seems you don't get it. Bootstrap resolvers may not be used as you thought.

removing/commenting out the bootstrap resolvers line

1. For most people, who use the default sources (the initial resolvers list), it is required, when the app is launched the first time. Source file server names need to be resolved before downloading the files.
2. Only those who use a static stamp with IP server, can do it without failure. But, in that case, bootstrap_resolvers wil not be used at all.

the proxy will fail to connect instead of sending a request on port 53

No user queries will ever be leaked through these resolvers.
Many people ignore this, but thought it as them as fallback. But, NO! Explained many times. They are not used to resolve user queries at all.

[mvevitsis]

I do understand it

Which is why I am saying, you should clarify that if you use a stamp (like I do) you can delete them/comment out this line. They are not needed.

You can write explicitly:
If your stamp includes an IP address, you may delete these resolvers, set them to an invalid address, or comment out this line.

Then you can block port 53 in your system firewall/router whatever.

This is exactly what I do, but many people think you cannot do it because it does not explicitly say you can remove them.

[lifenjoiner]

If not be used, no difference to delete or not, but causing general users confused and then make mistakes.