Who is using Firefox DNS-over-HTTPS ?

Originally Posted by redneonglow If you don't trust Cloudflare you can always use "Custom" with OpenNIC's non-logging DoH: https://doh.hack13.me/dns-query

I didn't get that one. The link produces

no dns query parameter found

Originally Posted by JZL240I-U I didn't get that one. The link produces no dns query parameter found

You have to make it the custom DoH server in Firefox settings.

Preferences->General->Network Settings

Check "Enable DNS over HTTPS"
Use provider: "Custom"
Custom: https://doh.hack13.me/dns-query

More info on the server from OpenNIC:

https://servers.opennicproject.org/e...s.opennic.glue
https://servers.opennicproject.org/e...s.opennic.glue

The URL depicted is a DNS query and needs a parameter so isn't going to return anything unless it gets one. It is intended to be used in a DoH query.

Okay, understood and thanks .

P.S.: Works like a charm .

Not me. When Firefox introduced it, it defaulted to Cloudflare. No thanks. They're as evil as Facebook, if not worse.

These days, I use a Pi-Hole with Unbound as the resolver. It's resolves my DNS requests throught root and authoritative servers only, so no single party has a log of my DNS requests. It also uses DNSSEC for extra security.

Originally Posted by jem777 Not me. When Firefox introduced it, it defaulted to Cloudflare. No thanks. They're as evil as Facebook, if not worse. These days, I use a Pi-Hole with Unbound as the resolver. It's resolves my DNS requests throught root and authoritative servers only, so no single party has a log of my DNS requests. It also uses DNSSEC for extra security.

Yep, that is next on my todo list. In autumn or so I hope my setup will be similar.

Yep, that is next on my todo list. In autumn or so I hope my setup will be similar.

I installed one on Raspberry Pi 3B (using Raspbian), and one on Orange Pi Zero (with Armbian). Both work well!
You might find this guide useful: https://docs.pi-hole.net/guides/unbound/

One potentential pitfall: If you enable DNSSEC, it's important that your system keeps proper time, otherwise DNS lookups will fail. This can of course be an issue with SBC's that have no hardware RTC.

Okay, thanks for the link and information.