I try to use “private DNS” option in my phone’s settings, but it often does not work, and therefore privacy cannot be protected all the time. Sometimes I just cannot even ping other servers by IP (like 1.1.1.1) because of it. My question is: WHY this function requires hostname (so you need to query some other plain text DNS before reaching encrypted DNS)? Also if I understand well, it uses DNS over TLS, but I’m curious why not DNS over HTTPS (which seems like a reliable solution since I have it configured in my browser and there is never a problem with it…also it uses IP address instead of hostname). Why no one is seeing this problem and no one wants to address it? I tried downloading Quad9 app, but it does not work either (I guess some IPS is filtering TLS requests in my network, but again why DOH is not used then?).

  • Stomata@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    18 hours ago

    Yes it is true that your phone has to use unencrypted DNS at first but after that is fine. I guess your ISP is blocking TLS traffic? You may set quad9 on your router.