DNS over HTTPS is disabled by default in Firefox port for OpenBSD

Firefox Port Maintainers for OpenBSD did not support the decision on enabling by default DNS over HTTPS in new versions of Firefox. After a brief discussing it was decided to leave the original behavior unchanged. To do this, the setting network.trr.mode is set to ‘5’, which leads to the unconditional disabling of DoH.

The following arguments are presented in favor of such a solution:

  • Applications should adhere to system-wide DNS settings rather than overriding them;
  • DNS encryption may not be a bad idea, but sending all DNS traffic to Cloudflare by default is definitely a bad idea.

DoH settings can still be overridden in about:config if desired. For example, you can set up your own DoH server, specify its address in the settings (option 'network.trr.uri'), and switch 'network.trr.mode' to ‘3’, after which all DNS queries will be handled by your server using the DoH protocol. To deploy your own DoH server, you can use, for example, doh-proxy from Facebook, DNSCrypt Proxy or rust-doh.

Source: opennet.ru

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster