4 ms·

Sadly, the trend for browsers to bypass system-level DNS resolution in favor of DNS-over-HTTPS means this kind of filtering is quickly becoming obsolete.

• moviuro 7y ago
  There is a canary domain in Firefox to prevent it from switching to DoH: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli...
  • warhorse10_9 7y ago
    You could also user a policy.json for Firefox to permanently disable it. I don't see Firefox dropping this option as it is important for enterprise users. https://github.com/mozilla/policy-templates https://github.com/mozilla/policy-templates
  • tssva 7y ago
    1.1.1.1 for Families doesn't seem to support the canary domain so by default Firefox would bypass this service. Also the canary domain only works if Firefox is not explicitly set to use DoH. If using DoH has explicitly been set by the user than the canary domain has no effect. Edit: Some testing seems to show that Mozilla has lumped these in with a select few others and will not bypass them when DoH is the default instead of explicitly selected even though they don't report the canary domain as an error. It will bypass them when DoH is explicitly enabled.
• woofcat 7y ago
  They offer this service as DoH as well. So in theory you could configure those apps to leverage this.