DNS over HTTPS is undermining my family DNS filter. Can I password protect the DNS settings or other solution?
Hello all,
I had been using firefox as the standard browser for years, but since the DNS-over-HTTPS feature I have had trouble with protecting my family on the web via DNS filtering. Currently the only solution that has worked is to use a different browser (the Spin browser, for whoever is interested). I have Firefox blocked using the Android family link feature (and they can't install new apps without permission). Personally, I would love to move everyone back to Firefox, but I can't find a way to do it safely. Is there a way to effectively disable DNS-over-HTTPS such that it can't be changed (kids are pretty quick at figuring out that they can just go to the settings and figuring out that they can turn the feautre back on). A parental control feature would be ideal, so I can just set the DNS-over-HTTPS to use the family DNS filter in a way they can't turn it off. Does anyone have an helpful solution, or is Firefox dead for family protection?
Respectfully, Andrew
由 Andrew Davis 於 修改
被選擇的解決方法
Hi Andrew, Firefox is supposed to honor parental controls and disable DNS over HTTPS if they are detected. I'm not sure how that works these days. The old blog post mentioned a canary domain, which your service provider may or may not use. See: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/
(On Windows, there are management options that I don't think exist on Android, but perhaps another support volunteer knows how to implement those.)
從原來的回覆中察看解決方案 👍 1所有回覆 (2)
選擇的解決方法
Hi Andrew, Firefox is supposed to honor parental controls and disable DNS over HTTPS if they are detected. I'm not sure how that works these days. The old blog post mentioned a canary domain, which your service provider may or may not use. See: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/
(On Windows, there are management options that I don't think exist on Android, but perhaps another support volunteer knows how to implement those.)
Thank you. The canary domain is a little beyond me, but maybe the problem has been fixed in updates sense I last tried. The article you shared it helpful, knowing that Mozilla intends to honor parental controls. I will look into this a little more.