diff --git a/net/dnscrypt-proxy/Makefile b/net/dnscrypt-proxy/Makefile
index c9cf6b6ef64..d57602faba8 100644
--- a/net/dnscrypt-proxy/Makefile
+++ b/net/dnscrypt-proxy/Makefile
@@ -1,10 +1,10 @@
-# $OpenBSD: Makefile,v 1.44 2019/09/10 13:19:25 bket Exp $
+# $OpenBSD: Makefile,v 1.45 2019/10/15 04:18:20 bket Exp $
 
 COMMENT =	flexible DNS proxy with support for encrypted DNS protocols
 
 GH_ACCOUNT =	jedisct1
 GH_PROJECT =	dnscrypt-proxy
-GH_TAGNAME =	2.0.27
+GH_TAGNAME =	2.0.28
 
 CATEGORIES =	net
 
diff --git a/net/dnscrypt-proxy/distinfo b/net/dnscrypt-proxy/distinfo
index 8e8f465b74f..736a1cf63a9 100644
--- a/net/dnscrypt-proxy/distinfo
+++ b/net/dnscrypt-proxy/distinfo
@@ -1,2 +1,2 @@
-SHA256 (dnscrypt-proxy-2.0.27.tar.gz) = pQH0SvOctD4ASJ755meKqK26K8mPkELdYc5g6a0HTVo=
-SIZE (dnscrypt-proxy-2.0.27.tar.gz) = 2478887
+SHA256 (dnscrypt-proxy-2.0.28.tar.gz) = K6KDQ97RUjPGnCNTzOFZqyrU5+troBjK9JXh5dMz2G0=
+SIZE (dnscrypt-proxy-2.0.28.tar.gz) = 2620245
diff --git a/net/dnscrypt-proxy/patches/patch-dnscrypt-proxy_example-dnscrypt-proxy_toml b/net/dnscrypt-proxy/patches/patch-dnscrypt-proxy_example-dnscrypt-proxy_toml
index 538d2654d17..2beef15ccc9 100644
--- a/net/dnscrypt-proxy/patches/patch-dnscrypt-proxy_example-dnscrypt-proxy_toml
+++ b/net/dnscrypt-proxy/patches/patch-dnscrypt-proxy_example-dnscrypt-proxy_toml
@@ -1,9 +1,9 @@
-$OpenBSD: patch-dnscrypt-proxy_example-dnscrypt-proxy_toml,v 1.5 2019/09/10 13:19:25 bket Exp $
+$OpenBSD: patch-dnscrypt-proxy_example-dnscrypt-proxy_toml,v 1.6 2019/10/15 04:18:20 bket Exp $
 
 Index: dnscrypt-proxy/example-dnscrypt-proxy.toml
 --- dnscrypt-proxy/example-dnscrypt-proxy.toml.orig
 +++ dnscrypt-proxy/example-dnscrypt-proxy.toml
-@@ -46,7 +46,7 @@ max_clients = 250
+@@ -45,7 +45,7 @@ max_clients = 250
  ## Note (2): this feature is not compatible with systemd socket activation.
  ## Note (3): when using -pidfile, the PID file directory must be writable by the new user