Windows 10 Insiders can now test DNS over HTTPS Insider

MikeMecanic · 31 May 2020

Steve C said:

What's the advantage of this compared to this feature I've been using for a while How to Enable or Disable DNS over HTTPS (DoH) in Google Chrome ?

This feature is disabled in Chrome, the new reg tweak enables DoH without any intervention.

The only advantage is that it fits the need of all browsers with default browser parameters. A new feature is always the occasion to play with Windows here.

As seen in the screenshot, there are many ways to get DoH to work (FF76.0.1).

Geneo · 08 Jun 2020

As for FF implementation, it is enabled by default for Intel desktops and lots of laptops, but don't recollect about AMD. By default, it will fall back on unsecure DNS if doh fails to resolve. You can tweak a FF parameter to make it always use doh. It is network.trr.mode=3.

Mozilla has an agreement with the DNS server provider, who in principle is the only one who can see what sites you are visiting, that they cannot see or use that data.

TairikuOkami · 11 May 2021

I wonder, is it possible to setup Encrypted DNS automatically?
I can setup DNS servers just fine, but they are always Unencrypted.

Code:

reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableAutoDoh" /t REG_DWORD /d "2" /f
netsh dns add encryption server=185.228.168.10 dohtemplate=https://doh.cleanbrowsing.org/doh/adult-filter autoupgrade=yes udpfallback=no
netsh dns add encryption server=185.228.169.11 dohtemplate=https://doh.cleanbrowsing.org/doh/adult-filter autoupgrade=yes udpfallback=no
wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("185.228.168.10","185.228.169.11")

This entry has to be created manually via Settings, I guess interface name changes after every install?

Code:

reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\InterfaceSpecificParameters\{5db3e81b-9b64-4972-8860-c1c9a19f6e79}\DohInterfaceSettings\Doh\185.228.168.10" /v "DohFlags" /t REG_QWORD /d "1" /f
reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\InterfaceSpecificParameters\{5db3e81b-9b64-4972-8860-c1c9a19f6e79}\DohInterfaceSettings\Doh\185.228.169.11" /v "DohFlags" /t REG_QWORD /d "1" /f