No - in either case a https connection will be established and DNS will be available via that connection. The only exception is the very first connection of the browser/system, where the domain of the DoH provider needs to be resolved first (e.g. dns.quad9.net -> 9.9.9.9).
No, but your OS needs to be configured to use the DNS server on your router. Easiest way to do this is with DHCP + NAT rule to ensure all DNS queries are processed by your router.
It's not necessary but it ensures that all DNS queries are processed by your router. It could be that there's software that uses a specific DNS server hardcoded to make sure they can avoid your Pi-hole (or alternative solution) to track you.
Depends on your security model IMHO. If unencrypted dns traffic on your network, or your router being a possible aggretion point for dns requests from devices on your network is fine, then it is a great way to simplify using it for your network.
9 Comments
American_Jesus@lemm.ee · 4 pts · 3y
No, but check if the browser isn't using other DoH provider. If so just disable it.
UnfortunateShort@lemmy.world · 4 pts · 3y
Note that it's obviously a different story for mobile devices. If you connect to different networks, you might want to leave DoH on on your device
03040@lemmy.world · 1 pts · 3y
Makes sense, is their any downside if I set the same DNS in Android and Router?
UnfortunateShort@lemmy.world · 2 pts · 3y
No - in either case a https connection will be established and DNS will be available via that connection. The only exception is the very first connection of the browser/system, where the domain of the DoH provider needs to be resolved first (e.g. dns.quad9.net -> 9.9.9.9).
Sizably8826@lemmy.world · 2 pts · 3y
you can check via this website
Vexz@kbin.social · 2 pts · 3y
No, but your OS needs to be configured to use the DNS server on your router. Easiest way to do this is with DHCP + NAT rule to ensure all DNS queries are processed by your router.
03040@lemmy.world · 1 pts · 3y
Why do I need a NAT rule if the computer uses DHCP?
Vexz@kbin.social · 2 pts · 3y
It's not necessary but it ensures that all DNS queries are processed by your router. It could be that there's software that uses a specific DNS server hardcoded to make sure they can avoid your Pi-hole (or alternative solution) to track you.
andruid@lemmy.ml · 2 pts · 3y
Depends on your security model IMHO. If unencrypted dns traffic on your network, or your router being a possible aggretion point for dns requests from devices on your network is fine, then it is a great way to simplify using it for your network.
I imagine it's probably good for 98% of people.