3 ms·

On iOS you can install a configuration profile that setup a DNS-over-HTTPS endpoint without touching the VPN settings. NextDNS does this when you install their

On iOS you can install a configuration profile that setup a DNS-over-HTTPS endpoint without touching the VPN settings. NextDNS does this when you install their app from what I remember. For other examples, see the profiles offered by AhaDNS.com[0]. On Android there is a Private DNS option where you can also setup a DNS-over-HTTPS endpoint of your choice. These options may be also a better choice for battery life than a fake VPN connection. [0]: https://github.com/AhaDNS/setup-guides/blob/master/Apple/iOS.md https://github.com/AhaDNS/setup-guides/blob/master/Apple/iOS...

rsync 4y ago
The android setting wherein you can input a standard DNS-over-HTTPS endpoint is sensible and sane. Is it, in fact, correct that there is no such setting in iOS and has to be app-enabled ? Or are you saying I can either manage the device with configurator2 and put that setting in or I can install an app (like nextdns) that does it for me ? Really frustrating that simple config options like DNS server and setting the name of your hotspot SSID are nonexistent in iOS ...
- achairapart 4y ago
  In iOS from what I know you need a configuration profile for that, I don't think it needs to be signed. Yes, you can make one with Apple Configurator 2, but there is also some tooling/app that may help, like: https://dns.notjakob.com/ https://dns.notjakob.com/ https://github.com/kkk669/DNSecure https://github.com/kkk669/DNSecure
whatsthatabout 4y ago
Is this really true? Because on macOS exactly this "workaround" does not work: https://github.com/AdguardTeam/AdGuardDNS/issues/214 https://github.com/AdguardTeam/AdGuardDNS/issues/214
- achairapart 4y ago
  Sorry, I can't tell for macOS, but on iOS i have a few DNS profiles and they all seems to work.
  - whatsthatabout 4y ago
    In addition to running a VPN? That's what the main comment was about, wasn't it? The profiles alone do work.
    - achairapart 4y ago
      As I understood it was about blocking content (via DNS) *even without a fake VPN connection*. Once you run a VPN connection, most likely its DNS takes over, profile or not profile.
- TheGoddessInari 4y ago
  The very thing you're linking to is because of running conflicting software on MacOS.
  - whatsthatabout 4y ago
    Yes I know but that's what the parent comment(s) are about? Using a profile for DNS settings instead of a fake VPN because you can't run more than one active VPN at a time.
Scoundreller 4y ago
Just did this last week, and it’s been life changing over mobile: https://news.ycombinator.com/item?id=32041238#32041742 https://news.ycombinator.com/item?id=32041238#32041742

rsync 4y ago

The android setting wherein you can input a standard DNS-over-HTTPS endpoint is sensible and sane. Is it, in fact, correct that there is no such setting in iOS and has to be app-enabled ? Or are you saying I can either manage the device with configurator2 and put that setting in or I can install an app (like nextdns) that does it for me ? Really frustrating that simple config options like DNS server and setting the name of your hotspot SSID are nonexistent in iOS ...

achairapart 4y ago
In iOS from what I know you need a configuration profile for that, I don't think it needs to be signed. Yes, you can make one with Apple Configurator 2, but there is also some tooling/app that may help, like: https://dns.notjakob.com/ https://dns.notjakob.com/ https://github.com/kkk669/DNSecure https://github.com/kkk669/DNSecure

whatsthatabout 4y ago

Is this really true? Because on macOS exactly this "workaround" does not work: https://github.com/AdguardTeam/AdGuardDNS/issues/214 https://github.com/AdguardTeam/AdGuardDNS/issues/214

achairapart 4y ago
Sorry, I can't tell for macOS, but on iOS i have a few DNS profiles and they all seems to work.
- whatsthatabout 4y ago
  In addition to running a VPN? That's what the main comment was about, wasn't it? The profiles alone do work.
  - achairapart 4y ago
    As I understood it was about blocking content (via DNS) *even without a fake VPN connection*. Once you run a VPN connection, most likely its DNS takes over, profile or not profile.
TheGoddessInari 4y ago
The very thing you're linking to is because of running conflicting software on MacOS.
- whatsthatabout 4y ago
  Yes I know but that's what the parent comment(s) are about? Using a profile for DNS settings instead of a fake VPN because you can't run more than one active VPN at a time.

Scoundreller 4y ago

Just did this last week, and it’s been life changing over mobile: https://news.ycombinator.com/item?id=32041238#32041742 https://news.ycombinator.com/item?id=32041238#32041742