pi-hole can address that be either adding its own DoH proxy, or by null routing / firewalling the most commonly known DoH DNS endpoints and having a local DNS r

pi-hole can address that be either adding its own DoH proxy, or by null routing / firewalling the most commonly known DoH DNS endpoints and having a local DNS record to NXDOMAIN use-application-dns.net while browsers respect it (to disable DoH). Adding Unbound DNS example below. local-zone: "use-application-dns.net" always_nxdomain This assumes that pi-hole is your router and not just a resolver. This could be done in OpenWRT as well. I just use a generic Linux router at home.