3 ms·

Until the ISP or government just blocks all the popular DNS servers by IP.....

• tptacek 4y ago
  That's pretty tough to do, since any IP can run a DoH cache.
  • Melatonic 4y ago
    True but in practice developers are not that creative (yet) and there are even people who are regularly creating and updating lists with all of these IPs. I manually entered them but you can also run a firewall on your mobile devices (android) as well and combined with a opnsense / pfsense at home you are pretty much set. There may come a day when a provider starts to generate tons of different DoH providers on the fly but I do not think we have seen that yet. Probably I should figure out a way to have my pfsense box though dynamically generate the blocked IP's based on one of these dynamically updated lists...