The technology of encryption DNS over HTTPS, the ability to send DNS queries over HTTPS, is now actively used by companies such as Mozilla, Google, Cloudflare and Cisco. Let’s see how to configure DNS over HTTPS in Firefox browser.
DNS over HTTPS is a relatively new technology that is designed to improve the confidentiality, security and reliability of DNS connections.
Domain Name Systems (DNS) play a very important role – they allow to match the addresses entered in the address bar with the corresponding IP addresses. Usually DNS lookups are performed automatically and usually without any encryption or protection from prying eyes.
Internet users have always had alternatives – connecting to a VPN service that uses a DNS provider that provides improved data protection, or using to improve security and privacy.
DNS over HTTPS is another option that has been introduced relatively recently. Mozilla added the core functionality of this technology to Firefox 60+.
How to configure “DNS over HTTPS” in Firefox
.Firefox Browser users can configure their browser to use DNS over HTTPS now. If you use at least 62.x, you can configure the feature. Please note that using DNS over HTTPS may cause connection problems, but all changes are reversible.
How to set up DNS over HTTPS in Firefox through browser settings
- Go to Settings > Basic > Network Settings and click the Customize button.
- In the window that opens, enable Enable DNS over HTTPS, in the drop-down menu Those provider select the default Cloudflare DNS or NextDNS, or specify another provider with DNS-over-HTTPS support by selecting Other URL.
- Example, to use openDNS encryption for DNS queries specify the following value in the field Other URL:
https://doh.opendns.com/dns-query
- Click OK and your DNS queries will be encrypted.
How to configure DNS over HTTPS in Firefox via config about:config
Note: This option is recommended for advanced users.
To configure DNS over HTTPS, you need to change three parameters of the new Trusted Recursive Resolver (TRR) in your browser:
- Please about:config into the Firefox address bar.
- Affirm that you accept the full risk if a warning page opens.
- Find the network.trr.mode option using the search string and double-click on it. Set the value to 2 so that DNS over HTTPS technology is selected as your default and your default DNS server is used as your backup. This is the best option in terms of compatibility.
- You can set 1 for Firefox to choose the fastest option; 3 for TRR only; 4 for shadow mode: runs TRR in parallel with standard DNS to synchronize and measure, but uses only the results of standard resolver; 0 – to disable TRR by default, 5 – to disable TRR by choice.
- – to disable TRR by choice.
- Find the parameter network.trr.uri using the search bar. In Firefox you will need to enter the DNS server address over HTTPS. Double click on the name of the parameter. Currently available is of public servers, among which you can highlight , , :
https://mozilla.cloudflare-dns.com/dns-query
Note: Mozilla has entered into an agreement with Cloudflare under which the data it records and stores are restricted.
https://dns.google/dns-query. https://doh.opendns.com/dns-query
You can also use our secure DNS server :
https://dns.comss.one/dns-query
- Find parameter network.trr.bootstrapAddress and double-click on itSet value
1.1.1.1if Cloudflare is selected.
- Find parameter network.trr.bootstrapAddress and double-click on itSet value
- Set
8.8.8.8if Google DNS is selected
- Set
- Set a value of
208.67.222.222if you selected Cisco OpenDNS
- Set a value of
- Set a value of
93.115.24.204if you selected Comss.one DNS - Restart the Firefox browser.
- Set a value of
- After setup, type in the Firefox address bar
about:networkingand click the DNS link in the menu on the left. This will open a page that shows the contents of the DNS cache in memory. - The TRR column will indicate “true” for hostnames that use DNS-over-HTTPS.
- It is also possible to verify the operation of DNS with the service (click the button Extended test). Make sure that all DNS servers found belong to the one you selected as the primary DNS. For example, if you selected Cisco OpenDNS:
