We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Denc nañu waxtaan wii. Yónneel yeneen laaj soo soxlaa ndimbal.

DNS over HTTPS is undermining my family DNS filter. Can I password protect the DNS settings or other solution?

  • 2 tontu
  • 1 am na jafe-jafe bii
  • 2 views
  • i mujjee tontu mooy Andrew Davis

Andrew Davis
Andrew Davis
more options

Hello all,

I had been using firefox as the standard browser for years, but since the DNS-over-HTTPS feature I have had trouble with protecting my family on the web via DNS filtering. Currently the only solution that has worked is to use a different browser (the Spin browser, for whoever is interested). I have Firefox blocked using the Android family link feature (and they can't install new apps without permission). Personally, I would love to move everyone back to Firefox, but I can't find a way to do it safely. Is there a way to effectively disable DNS-over-HTTPS such that it can't be changed (kids are pretty quick at figuring out that they can just go to the settings and figuring out that they can turn the feautre back on). A parental control feature would be ideal, so I can just set the DNS-over-HTTPS to use the family DNS filter in a way they can't turn it off. Does anyone have an helpful solution, or is Firefox dead for family protection?

Respectfully, Andrew

Hello all, I had been using firefox as the standard browser for years, but since the DNS-over-HTTPS feature I have had trouble with protecting my family on the web via DNS filtering. Currently the only solution that has worked is to use a different browser (the Spin browser, for whoever is interested). I have Firefox blocked using the Android family link feature (and they can't install new apps without permission). Personally, I would love to move everyone back to Firefox, but I can't find a way to do it safely. Is there a way to effectively disable DNS-over-HTTPS such that it can't be changed (kids are pretty quick at figuring out that they can just go to the settings and figuring out that they can turn the feautre back on). A parental control feature would be ideal, so I can just set the DNS-over-HTTPS to use the family DNS filter in a way they can't turn it off. Does anyone have an helpful solution, or is Firefox dead for family protection? Respectfully, Andrew

Andrew Davis moo ko soppali ci

Saafara biñ tànn

Hi Andrew, Firefox is supposed to honor parental controls and disable DNS over HTTPS if they are detected. I'm not sure how that works these days. The old blog post mentioned a canary domain, which your service provider may or may not use. See: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/

(On Windows, there are management options that I don't think exist on Android, but perhaps another support volunteer knows how to implement those.)

Jàng tontu lii ci fi mu bokk 👍 1

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Saafara yiñ Tànn

Hi Andrew, Firefox is supposed to honor parental controls and disable DNS over HTTPS if they are detected. I'm not sure how that works these days. The old blog post mentioned a canary domain, which your service provider may or may not use. See: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/

(On Windows, there are management options that I don't think exist on Android, but perhaps another support volunteer knows how to implement those.)

Andrew Davis
Andrew Davis Ki laajte
more options

Thank you. The canary domain is a little beyond me, but maybe the problem has been fixed in updates sense I last tried. The article you shared it helpful, knowing that Mozilla intends to honor parental controls. I will look into this a little more.