this post was submitted on 30 Apr 2025
16 points (100.0% liked)

Privacy

37535 readers
571 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I try to use "private DNS" option in my phone's settings, but it often does not work, and therefore privacy cannot be protected all the time. Sometimes I just cannot even ping other servers by IP (like 1.1.1.1) because of it. My question is: WHY this function requires hostname (so you need to query some other plain text DNS before reaching encrypted DNS)? Also if I understand well, it uses DNS over TLS, but I'm curious why not DNS over HTTPS (which seems like a reliable solution since I have it configured in my browser and there is never a problem with it...also it uses IP address instead of hostname). Why no one is seeing this problem and no one wants to address it? I tried downloading Quad9 app, but it does not work either (I guess some IPS is filtering TLS requests in my network, but again why DOH is not used then?).

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 5 days ago* (last edited 4 days ago) (2 children)

WHY this function requires hostname

Because it uses DoT and not DoH.

I also had issues like this, so I just sidestepped it and setup AdGuard Home. When away from the house I use RethinkDNS.

[–] [email protected] 1 points 4 days ago (1 children)

Yeah the thing is, if DOT is default in android system, and there is no option to use DOH, why there is no app that uses DOH? Also I cannot move to my own swtup i got no public IP

[–] [email protected] 1 points 3 days ago

Rethink and personalDNSfilter has doh. I don't know why it uses dot but I have set up doh on mobile browsers.
But I don't see issues with dot

[–] [email protected] 1 points 4 days ago

Because it uses DoH and not DoT.

other way around, but yes