I configured Firefox to use my local DoH server instead. That way I don't have to fight against DoH, I get the (few) benefits of ESNI and can still choose what

I configured Firefox to use my local DoH server instead. That way I don't have to fight against DoH, I get the (few) benefits of ESNI and can still choose what my upstream servers will be. Your solution is also good and it is what we configured at work (through group policies). You or someone else reading may find this[1] and this[2] useful. [1] https://github.com/mozilla/policy-templates#dnsoverhttps https://github.com/mozilla/policy-templates#dnsoverhttps [2] https://cloud.google.com/docs/chrome-enterprise/policies/?policy=DnsOverHttpsMode https://cloud.google.com/docs/chrome-enterprise/policies/?po...