#doh

bkoehn@diaspora.koehn.com

Finally got the #DNS locked down at home. I had mis-configured #pfsense to do #DNSSEC verification itself, which disables DNS over #TLS (it would be nice if that was reflected in the UI and not just the documentation). Now the resolver that nearly everything uses works over #DoH (DNS over #HTTPS), and dig reports that my upstream resolver is doing DNSSEC verification for me (it reports ad as an answer flag).

Was finally able to confirm with #CloudFlare’s help page and by checking the firewall state for TCP connections open to port 853.

iconnect@diasp.org

#doh #dns #https #firefox #privacy #url #browser #internet #android #iphone #smartphone #windows #linux
https://wiki.mozilla.org/Trusted_Recursive_Resolver
"All preferences for the DNS-over-HTTPS functionality in Firefox are located under the network.trr prefix (TRR == Trusted Recursive Resolver). The support for these were added in Firefox 62.
network.trr.mode
The resolver mode. You should not change the mode manually, instead use the UI in the Network Settings section of about:preferences"

#aboutconfig #setting

#chromium #bromite #cloudflare