Re: Should we block DoH by default?

On Tue, Mar 03, 2020 at 05:18:57PM +0000, Michael Tremer (michael.tremer@ipfire.org) wrote:

What we could do instead is adding a checkbox to the new DNS settings section and call it “Enforce using IPFire as DNS resolver”.

That could then activate the following:

• Filter the domain name that Firefox uses to auto-enable DoH (*)

• Reject any client connecting to any other DNS server on the internet

I would be fine with that, although I'd prefer two separate checkboxes for those. I can imagine situations where I'd want one or the other but not both (admittedly not very likely).