1.1.1.1 for Families

Re:1.1.1.1 for Families by ryandvm on Wednesday April 01, 2020 @10:20AM (#22748730)

Sadly, the trend for browsers to bypass system-level DNS resolution in favor of DNS-over-HTTPS means this kind of filtering is quickly becoming obsolete.

[ Parent | on HN ]

Re:1.1.1.1 for Families by moviuro on Wednesday April 01, 2020 @10:22AM (#22748773)

There is a canary domain in Firefox to prevent it from switching to DoH: https://support.mozilla.org/en-US/kb/canary-domain-use-appli...

[ Parent | on HN ]

Re:1.1.1.1 for Families by warhorse10_9 on Wednesday April 01, 2020 @10:30AM (#22748914)

You could also user a policy.json for Firefox to permanently disable it. I don't see Firefox dropping this option as it is important for enterprise users.

https://github.com/mozilla/policy-templates

[ Parent | on HN ]

Re:1.1.1.1 for Families by tssva on Wednesday April 01, 2020 @12:26PM (#22750479)

1.1.1.1 for Families doesn't seem to support the canary domain so by default Firefox would bypass this service.

Also the canary domain only works if Firefox is not explicitly set to use DoH. If using DoH has explicitly been set by the user than the canary domain has no effect.

Edit: Some testing seems to show that Mozilla has lumped these in with a select few others and will not bypass them when DoH is the default instead of explicitly selected even though they don't report the canary domain as an error. It will bypass them when DoH is explicitly enabled.

[ Parent | on HN ]

Re:1.1.1.1 for Families by woofcat on Wednesday April 01, 2020 @10:49AM (#22749155)

They offer this service as DoH as well. So in theory you could configure those apps to leverage this.

[ Parent | on HN ]