According to techdows reports, Mozilla decided from the beginning of the end of September 2019, the United States launched Firefox users to the DNS over HTTPS (DoH) .
We plan to gradually introduced from the end of September DoH in the United States. We first enable users for a small part of the DoH, while monitoring any problems, then more user-oriented. If everything goes smoothly, before the general promotion DoH also issued a notice.
After a number of experiments over the past two years, the organization decided to use DoH default in Firefox. Mozilla uses a third-party Cloudflare as the DoH, because it follows a strict privacy agreement, which means that all user traffic through Cloudflare network.
Generally, most DNS requests are completed in the case of the public, monitor the process to obtain logging site and IP addresses. Compared with traditional DNS, DOH (sent via encrypted HTTPs request DNS) service affect the performance of the cloud is small, in most cases only 6 milliseconds slow, a connection error rate did not differ significantly, but more than DNS security, user privacy can They are better protected.
But note that, TLS still sent in the clear destination.
Firefox allows disabled DoH and revert to the system DNS. Look at how to enable DoH on Firefox:
- Start Firefox
- Click on menu > Options > General > Network Settings > “Enable DNS Over HTTPS”
Firefox to check whether Cloudflare DNS:
- When enabled DoH, access https://1.1.1.1/help
- If "Connected to 1.1.1.1" and "DNS on HTTPS (DoH)" status is "Yes", then Firefox is using Cloudflare DNS
Mozilla blog post mentioned, although in the United States DoH is the default configuration after the installation of Firefox, but some can also be configured to disable it:
- If you are using parental control is not enabled DoH
- Enterprise configuration also makes DoH disabled unless "Enterprise Configuration explicitly enable"