Does Firefox support private dns encryption?
Is it the same setup for all the various platforms?

Peter wrote:

> Does Firefox support private dns encryption?
> Is it the same setup for all the various platforms?

yes, from the menu use tools/settings and type "dns" in the search
field, choose your level ...

Andy Burns <usenet@andyburns.uk> wrote:
>> Does Firefox support private dns encryption?
>> Is it the same setup for all the various platforms?
>
> yes, from the menu use tools/settings and type "dns" in the search
> field, choose your level ...

I wiped out the old firefox and installed Windows Firefox 123.0 (64-bit).
I went to "about:preferences#privacy" and typed "control+F" dns.

You're correct that there is a LOT of DNS settings there.
It's confusing to me what to set it to get DNS encryption.

Any advice would be appreciated because I don't have Windows set up for a
DNS provider that I know of (my ISP I think takes care of the DNS for me).

I'm just guessing what to set up in Windows 10 Firefox, but I set it to
Enable DNS over HTTPS using: = Max Protection

Guessing further in the Windows 10 Firefox DNS GUI, I had the choice of
Choose provider: = Cloudflare (default) or NextDNS or Custom
I took the default (so I hope it also does ad blocking for me).

Then I went to some of the Firefox sponsored links at the default tab.
How can I tell for sure if encrypted DNS is working and blocking ads?

Am 04.03.24 um 20:50 schrieb Peter:
> Andy Burns <usenet@andyburns.uk> wrote:
>>> Does Firefox support private dns encryption?
>>> Is it the same setup for all the various platforms?
>>
>> yes, from the menu use tools/settings and type "dns" in the search
>> field, choose your level ...
>
> I wiped out the old firefox and installed Windows Firefox 123.0 (64-bit).
> I went to "about:preferences#privacy" and typed "control+F" dns.
>
> You're correct that there is a LOT of DNS settings there.
> It's confusing to me what to set it to get DNS encryption.
>
> Any advice would be appreciated because I don't have Windows set up for a
> DNS provider that I know of (my ISP I think takes care of the DNS for me).
>
> I'm just guessing what to set up in Windows 10 Firefox, but I set it to
> Enable DNS over HTTPS using: = Max Protection
>
> Guessing further in the Windows 10 Firefox DNS GUI, I had the choice of
> Choose provider: = Cloudflare (default) or NextDNS or Custom
> I took the default (so I hope it also does ad blocking for me).
>
> Then I went to some of the Firefox sponsored links at the default tab.
> How can I tell for sure if encrypted DNS is working and blocking ads?

Encrypted DNS does not block ads!

--
"Gutta cavat lapidem." (Ovid)

Jörg Lorenz wrote:
> Encrypted DNS does not block ads!
Encrypted DNS does not imply ad-blocking, but there are several DNS
providers who combine both offerings ...
<https://avoidthehack.com/best-dns-privacy>

Andy Burns <usenet@andyburns.uk> wrote:
>> Encrypted DNS does not block ads!
>
> Encrypted DNS does not imply ad-blocking, but there are several DNS
> providers who combine both offerings ...
>
> <https://avoidthehack.com/best-dns-privacy>

Thank you for that link for encrypted DNS ad blockers for Firefox,
<https://avoidthehack.com/best-dns-privacy> which listed these
quad9, nextdns, adguard, controld, mullvad, decloudus, rethinkdns &
cloudflare for ad blocking and non-ad-blocking encrypted DNS servers.

Given Android uses the fqdn while Windows uses the IP address for the
encrypted dns server, it's not clear which of the two each Firefox wants.

When I go to Windows Firefox 123.0 about:preferences#privacy and scroll to
DNS over HTTPS > Max Protection > Choose provider: > Custom >
"Domain Name System (DNS) over HTTPS sends your request for
a domain name through an encrypted connection, providing a
secure DNS and making it harder for others to see which
website you're about to access."

Do I enter the fqdn or the IP address of the adblocking encrypted DNS?
And do I also need to set this option next to that option above?
HTTPS-Only Mode
"HTTPS provides a secure, encrypted connection between Firefox
and the websites you visit. Most websites support HTTPS, and if
HTTPS-Only Mode is enabled, then Firefox will upgrade all
connections to HTTPS."
(x) Enable HTTPS-Only Mode in all windows
(_) Enable HTTPS-Only Mode in private windows only
(_) Don't enable HTTPS-Only Mode

For the Android Firefox, in Settings, is "HTTPS-Only Mode" which defaults
to "off" but which I just set to "On" where it doesn't even ask what
private dns server to use. It only asks two unrelated questions
(x) Enable in all tabs
(_) Enable only in private tabs

So how does Android Firefox know which private DNS server & type to use?

Can someone just let me know what they have set which is working for them?

On Mon, 4 Mar 2024 19:50:18 +0000, Peter <confused@nospam.net> wrote:

>Andy Burns <usenet@andyburns.uk> wrote:
>>> Does Firefox support private dns encryption?
>>> Is it the same setup for all the various platforms?
>>
>> yes, from the menu use tools/settings and type "dns" in the search
>> field, choose your level ...
>
>I wiped out the old firefox and installed Windows Firefox 123.0 (64-bit).
>I went to "about:preferences#privacy" and typed "control+F" dns.
>
>You're correct that there is a LOT of DNS settings there.
>It's confusing to me what to set it to get DNS encryption.
>
>Any advice would be appreciated because I don't have Windows set up for a
>DNS provider that I know of (my ISP I think takes care of the DNS for me).
>
>I'm just guessing what to set up in Windows 10 Firefox, but I set it to
> Enable DNS over HTTPS using: = Max Protection
>
>Guessing further in the Windows 10 Firefox DNS GUI, I had the choice of
> Choose provider: = Cloudflare (default) or NextDNS or Custom
>I took the default (so I hope it also does ad blocking for me).
>
>Then I went to some of the Firefox sponsored links at the default tab.
>How can I tell for sure if encrypted DNS is working and blocking ads?

What relationship do you think exists between ad blocking and DNS?

Char Jackson <none@none.invalid> wrote:
Char Jackson wrote on 05.03.2024 00:46>>Then I went to some of the Firefox
sponsored links at the default tab.
>>How can I tell for sure if encrypted DNS is working and blocking ads?
>
> What relationship do you think exists between ad blocking and DNS?

This question is about how to set up ad blocking encrypted DNS servers,
which, as Andy already proved elsewhere in this thread, is what they do.

But people are getting hung up on the ad blocking because they're not aware
that almost all the encrypted DNS servers offer ad blocking benefits.

Forget about the ad blocking aspect of the encrypted DNS servers.
The question is how to set up Firefox to use them.

On Android.
On Windows.

It's not a simple answer that you can just guess on.

For example, the Android OS uses FQDN encrypted DNS settings.
While the Windows OS uses IP address encrypted DNS settings.
And the menus are completely different in each OS's Firefox.

All I want to know can only be known by those who use encrypted DNS.
How do you set it up on Android & Windows is all I'm asking here.

It's not as intuitive as you might think it is if you never tried it.
Especilly since there are two ways in each operating system to set it.

One is inside the browser alone.
The other is inside the operating system itself.

And there are two different types to set up.

One is encrypted DNS over HTTP.
The other is encrypted DNS over TLS.

Everything about this encrypted DNS setup is not intuitive.
It's only easy for people who never did it.

They think it's set up like normal DNS is set up.
It's not.

Am 04.03.24 um 22:08 schrieb Andy Burns:
> Jörg Lorenz wrote:
>
>> Encrypted DNS does not block ads!
>
> Encrypted DNS does not imply ad-blocking, but there are several DNS
> providers who combine both offerings ...

Sure. But there is no connection between DNS-over-HTTPS and ad blocking.

--
"Gutta cavat lapidem." (Ovid)

Am 05.03.24 um 01:22 schrieb Peter:
> Do I enter the fqdn or the IP address of the adblocking encrypted DNS?

Just a hyperlink like this:

https://anycast.uncensoreddns.org/dns-query

Or check Cloudflare:

DNS over HTTPS
With DNS over HTTPS (DoH), DNS queries and responses are encrypted and
sent via the HTTP or HTTP/2 protocols. DoH ensures that attackers cannot
forge or alter DNS traffic. DoH uses port 443, which is the standard
HTTPS traffic port, to wrap the DNS query in an HTTPS request. DNS
queries and responses are camouflaged within other HTTPS traffic, since
it all comes and goes from the same port.

https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/

--
"Gutta cavat lapidem." (Ovid)

Am 05.03.24 um 02:29 schrieb Peter:
> But people are getting hung up on the ad blocking because they're not aware
> that almost all the encrypted DNS servers offer ad blocking benefits.

This is not true and may be the case in the US. In Europe people do not
appreciate any form of censorship which lacks transparency.

1.1.1.1 of Cloudflare has no ad blocking.

--
"Gutta cavat lapidem." (Ovid)

J�rg Lorenz <hugybear@gmx.net> wrote:
>> But people are getting hung up on the ad blocking because they're not aware
>> that almost all the encrypted DNS servers offer ad blocking benefits.
>
> This is not true and may be the case in the US. In Europe people do not
> appreciate any form of censorship which lacks transparency.
>
> 1.1.1.1 of Cloudflare has no ad blocking.

Like I said, people are getting hung up on encrypted DNS ad blocking but
this question is the same whether the Private DNS does ad blocking or not.

The question is how to set up Firefox for Private DNS on Android & Windows
(where the Android system DNS is a FQDN while Windows uses an IP address).

If that wasn't confusing enough, Firefox seems to use a domain name
(but not a fully qualified domain name, so I'll call it half qualified).

This article suggests the answer for Firefox (using a half domain name).
https://avoidthehack.com/best-dns-privacy

These are the half domain names that Firefox apparently uses (AFAICT).
a. about:preferences#privacy
b. Enable DNS over HTTPS using: > Max Protection
c. Choose provider:

Firefox Private DNS Provider:
1. Quad9
2. NextDNS
3. AdGuard
4. Control D
5. Mullvad
6. DeCloudUs
7. ReThinkDNS
8. Cloudflare

To get the same thing in the Android system, you have to use a FQDN.
a. Settings > Connections > More connection settings > Private DNS

Android Private DNS Provider:
1. dns.quad9.net
2. nextdns-android
3. dns.adguard.com
4. p2.freedns.controld.com
5. adblock.dns.mullvad.net
6. dns.decloudus.com (DoT) https://dns.decloudus.com/dns-query (DoH)
7. max.rethinkdns.com
8. one.one.one.one

To get the same thing in the Windows system, you have to use an IP
(plus you have to manually change registry settings in Windows 10).
a. https://blog.netwrix.com/2022/10/11/dns-over-https/
b. HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\
c. EnbleAutoDoh=2(0h)

Windows Private DNS Provider:
1. 149.112.112.112
2. 104.21.19.106
3. 94.140.14.14
4. 76.76.2.11
5. 194.242.2.3
6. 78.47.212.211
7. 137.66.7.89
8. 1.1.1.1

These are the URLs to get more information about each provider.
1. https://quad9.net/
2. https://nextdns.io/
3. https://adguard-dns.io/en/welcome.html
4. https://controld.com/free-dns
5. https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
6. https://decloudus.com/index.html
7. https://rethinkdns.com/
8. https://developers.cloudflare.com/1.1.1.1

On Tue, 5 Mar 2024 07:42:13 +0100, J�rg Lorenz wrote:
> Just a hyperlink like this:

Just another hyperlink, like this.
https://www.kuketz-blog.de/empfehlungsecke/#dns