About DNSCrypt-OSXClient

This software encrypts and authenticates DNS packets between your computer and a DNS resolver using DNSCrypt.

Tips:

• If you have a firewall, open TCP and UDP ports 53, 54, 443 and 1053. These are the most common ports used for DNSCrypt.
• The "Automatically disable if blocked" feature automatically disables DNSCrypt when DNS queries are not able to reach the DNSCrypt resolver. This can happen on public WiFi networks that require going through a captive portal before you can access external networks. This function is only provided for conveniency. When enabled, the protocol can be easily downgraded by third-parties. In other words, when the "Automatically disable if blocked" feature is enabled, this software doesn't provide any security at all against active attackers, but it can still be useful against passive attackers and in order to bypass DNS censorship. Don't enable it unless you are frequently roaming and you don't want to manually disable/enable DNSCrypt.
• Using Little Snitch? There are 4 rules you need to establish, which Little Snitch should prompt for when trying to activate this application:
  1. Allow any outgoing connection for system processes (dnscrypt-proxy)
  2. Allow any incoming connection for system process (dnscrypt-proxy)
  3. Allow any outgoing connection for system processes (dig)
  4. Allow outgoing TCP connections on port 80( http) of www.apple.com for system process (curl)
  (Thanks to @cavemandaveman)