6 ms·

On Android, in Settings, Network & internet, Private DNS, you can only provide one in "Private DNS provider hostname" (AFAIK). Btw, I really don't understand w

• quacksilver 1y ago
  Private DNS on Android refers to 'DNS over HTTPS' and would normally only accept a hostname. Normal DNS can normally be changed in your connection settings for a given connection on most flavours of Android.
  • quaintdev 1y ago
    Its DNS over TLS. Android does not support DNS over HTTPS except Google's DNS
    • KoolKat23 1y ago
      As far as I understand it, it's Google or Cloudflare?
    • lxgr 1y ago
      It does since Android 11.
      • Tarball10 1y ago
        For a limited set of DoH providers. It does not let you enter a custom DoH URL, only a DoT hostname.
  • rom1v 1y ago
    > Private DNS on Android refers to 'DNS over HTTPS' Yes, sorry, I did not mention it. So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback.
    • ignoramous 1y ago
      > So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback. Not true. If the (DoH) host has multiple A/AAAA records (multiple IPs), any decent DoH client would retry its requests over multiple or all of those IPs.
      • lxgr 1y ago
        Does Cloudflare offer any hostname that also resolves to a different organization’s resolver (which must also have a TLS certificate for the Cloudflare hostname or DoH clients won’t be able to connect)?
        • ignoramous 1y ago
          Usually, for plain old DNS, primary and secondary resolvers are from the same provider, serving from distinct IPs.
          • lxgr 1y ago
            Yes, but you were talking about DoH. I don’t know how that could plausibly work.
            • ignoramous 1y ago
              > but you were talking about DoH DoH hosts can resolve to multiple IPs (and even different IPs for different clients)? Also see TFA It's worth noting that DoH (DNS-over-HTTPS) traffic remained relatively stable as most DoH users use the domain cloudflare-dns.com, configured manually or through their browser, to access the public DNS resolver, rather than by IP address. DoH remained available and traffic was mostly unaffected as cloudflare-dns.com uses a different set of IP addresses.
              • lxgr 1y ago
                > DoH hosts can resolve to multiple IPs (and even different IPs for different clients)? Yes, but not from a different organization. That was GPs point with > So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback. A cross-organizational fallback is not possible with DoH in many clients, but it is with plain old DNS. > It's worth noting that DoH (DNS-over-HTTPS) traffic remained relatively stable as most DoH users use the domain cloudflare-dns.com Yes, but that has nothing to do with failovers to an infrastructurally/operationally separate secondary server.
  • eptcyka 1y ago
    Cloudflare has valid certs for 1.1.1.1
  • fs111 1y ago
    No, it is not DNS over HTTPS it is DNS over TLS, which is different.
    • lxgr 1y ago
      Android 11 and newer support both DoH and DoT.
      • politelemon 1y ago
        Where is this option? How can I distinguish the two, the dialog simply asks for a host name