If you are interested in preventing censorship at the DNS on your Android device, take a look at RethinkDNS. I have been testing it for a few months and it really is quite an impressive app. RethinkDNS uses the VPN api's in Android to not only route DNS request to your prefered DNS provider, it also includes a comprehensive app blocking firewall with network monitoring that allows you to prevent all the apps you select from connecting to the internet at both ipv4 and ipv6 addresses.
RethinkDNS is very customisable. For example it comes with several preset DNS resolvers to choose from like RethinkDNS own DNS servers that include Ad blocking and malware blocking lists but you can also use server stamps to set up RethinkDNS to use other DNS providers like DNScrypt.
I'll explain how that works here.
Take a look at this list of DNS Resolvers from DNScrypt
The top one says,
Public non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver hosted on Scaleway by @acsacsar (twitter)
That sdns stamp is kinda like a QR code in that it contains all the information about the DNS resolver. If you want to see what it contains, use this tool.
So copy paste the sdns stamp above into the sdns field of that tool and you will see it fills out the other fields to show the IP address of that DNScrypt Resolver, its public encryption key and it shows it supports DNSsec, it does not filter results and does not keep logs.
So anyway. If you wanted to use that resolver. In the RethinkDNS HOME tab you can click on DNS and then click on CONFIGURE. Under TYPE choose OTHER DNS. At the top choose DNS Crypt.. At the bottom of the DNScrypt settings Page click the PLUS sign.
Enter a Name for the new resolver.
Enter the sdns Stamp
Enter a Description
- Public non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver hosted on Scaleway by @acsacsar (twitter)
Then click add and then select it from the list. Assuming that resolver is working you should see a checkmark beside it in the list of resolvers to show your android device is now using that DNScrypt resolver.