3 ms·
https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli... There is. You configu
by Jonnax 7y ago
https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli...
There is. You configure your DNS resolve this "canary" domain to disable it.
- ComputerGuru 7y agoAll that does is block DoH entirely, right? Not allow me to say “use this DoH server” or “don’t use DoH for this domain.”
- Jonnax 7y agoI think if you want to get that detailed you'd be pushing a custom managed Firefox profile.
- ComputerGuru 7y agoYou have twenty different applications using DoH for “increased security” and you need a custom profile for each? Why not a single line in resolv_doh.conf?
- zaarn 7y agoWhat local resolver supports resolv_doh.conf at this time? At the moment, Mozilla wants to push this for users where DoH just works, for people it doesn't providing options to disable it. Once resolv_doh.conf becomes a thing for all platforms (Linux, OSX and Windows) they can use that.
- jedieaston 7y agoHere are the instructions to do it, straight from Mozilla: https://support.mozilla.org/en-US/kb/firefox-dns-over-https#w_switching-providers https://support.mozilla.org/en-US/kb/firefox-dns-over-https#...
- throw0101a 7y agoOn Windows, you can probably do this via GPOs. How does one configure a fleet of Mac or Linux machines? How does one do it with BYOD or on a campus of students' machines? Perhaps some thought as to service discovery should have been done: * https://tools.ietf.org/html/rfc6763 https://tools.ietf.org/html/rfc6763 If Mozilla is going to re-invent the wheel (OSes already do DNS look ups), they perhaps should have asked the DNS folks (e.g., DNS-OARC) about some of the corner/use cases IMHO.
- namibj 7y agoYou missunderstood. He wants to tell his devices that they should use a specific DoH reaolver, instead of their default.