Repository navigation
Option to enable DoH #4757
Description
Activity
This software/package looks very helpful for this job:
Control D DNS is actually better than Quad9:
Cloudflare DNS is the fastest DNS server worldwide I guess:
You can do this with
systemd-resolveddirectly no need for the extradnscrytat all :)The conf could in the future look something like:
"network_config": { "type": "iwd", "dns": { "provider": "cloudfare", "over_tls": true }, "mac_address": "random" }
This is reasonable ask to be honest and is existing capability.
DoH is more private than DoT AFAIK.
DoH and DoT encrypt the query the same way. DoH only differs in blending with port 443 traffic, which helps against networks that block port 853.The resolver IP is visible either way, so the privacy gain is marginal.
Against the resolver, they are identical, to a network observer well that's different.
Anyways wiring an extra daemon (e.g: dnscrypt, cloudflared, ...) would be considered more of post-install versus
systemd-resolvedwhich we already ship/configure, if that makes sense.
describe the request
It would be amazing if we could be able to choose a DNS server that works system-wide.
For example using Quad9 DNS system-wide would make the system more secure and private in my opinion.