We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Does Firefox + Cloudflare DNS over HTTPS block queries to known malicious sites?

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by philipp

miwiinga
miwiinga
more options

Does Firefox + Cloudflare DNS over HTTPS block queries to known malicious sites like OpenDNS. I use OpenDNS at home to automatically block queries to known malicious sites. Using Firefox DoH bypasses this. Am I faced with privacy versus security or does Cloudflare service also prevent access to malicious sites? Thank you.

Does Firefox + Cloudflare DNS over HTTPS block queries to known malicious sites like OpenDNS. I use OpenDNS at home to automatically block queries to known malicious sites. Using Firefox DoH bypasses this. Am I faced with privacy versus security or does Cloudflare service also prevent access to malicious sites? Thank you.

Chosen solution

hi, no the dns over https providers that are integrated into firefox do not block or filter particular domains (other than required by law), which is laid out in this policy: https://wiki.mozilla.org/Security/DOH-resolver-policy

firefox would depend on google's safebrowsing lists to protect you from connecting to known malicious sites: How does built-in Phishing and Malware Protection work?

you can also configure firefox to use opendns as a trusted resolver though: https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

Read this answer in context 👍 1

All Replies (1)

philipp
philipp
  • Moderator
more options

Chosen Solution

hi, no the dns over https providers that are integrated into firefox do not block or filter particular domains (other than required by law), which is laid out in this policy: https://wiki.mozilla.org/Security/DOH-resolver-policy

firefox would depend on google's safebrowsing lists to protect you from connecting to known malicious sites: How does built-in Phishing and Malware Protection work?

you can also configure firefox to use opendns as a trusted resolver though: https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS