79
edits
Trusted Recursive Resolver: Difference between revisions
Jump to navigation
Jump to search
Update DoH list
m (Fixes in the spirit of https://bugzilla.mozilla.org/show_bug.cgi?id=1571734) |
(Update DoH list) |
||
| Line 2: | Line 2: | ||
transfers and [https://blog.mozilla.org/futurereleases/2019/07/31/dns-over-https-doh-update-detecting-managed-networks-and-user-choice/ comparable] performance. This page describes Firefox configuration settings related to DoH in detail, and offers some explanation of internal operations of the implementation. | transfers and [https://blog.mozilla.org/futurereleases/2019/07/31/dns-over-https-doh-update-detecting-managed-networks-and-user-choice/ comparable] performance. This page describes Firefox configuration settings related to DoH in detail, and offers some explanation of internal operations of the implementation. | ||
Mozilla operates a Trusted Recursive Resolver program, whose requirements are documented at [[Security/DOH-resolver-policy]]. All TRRs offered by Firefox conform to the requirements described in the policy | Mozilla operates a Trusted Recursive Resolver program, whose requirements are documented at [[Security/DOH-resolver-policy]]. All TRRs offered by Firefox conform to the requirements described in the policy. | ||
For more information, we've created [https://support.mozilla.org/en-US/kb/firefox-dns-over-https documentation about DoH and our plans for deployment]. We also have an [https://support.mozilla.org/en-US/kb/dns-over-https-doh-faqs FAQ], and instructions for [https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https network operators who wish to disable DoH on their networks]. | For more information, we've created [https://support.mozilla.org/en-US/kb/firefox-dns-over-https documentation about DoH and our plans for deployment]. We also have an [https://support.mozilla.org/en-US/kb/dns-over-https-doh-faqs FAQ], and instructions for [https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https network operators who wish to disable DoH on their networks]. | ||
| Line 34: | Line 34: | ||
* https://mozilla.cloudflare-dns.com/dns-query | * https://mozilla.cloudflare-dns.com/dns-query | ||
* https://dns.google/dns-query | * https://dns.google/dns-query | ||
* https://dns.quad9.net/dns-query | |||
For more servers, see this unofficial list of DoH servers: https://github.com/curl/curl/wiki/DNS-over-HTTPS. | For more servers, see this unofficial list of DoH servers: https://github.com/curl/curl/wiki/DNS-over-HTTPS. | ||
| Line 47: | Line 48: | ||
; network.trr.wait-for-portal : | ; network.trr.wait-for-portal : | ||
(default: false) set this boolean to | (default: false) set this boolean to ''true'' to tell Firefox to wait for the captive portal detection before TRR is used. (on Android, this will default to ''false'' since the captive portal handling is done outside of Firefox, by the OS itself.) | ||
; network.trr.allow-rfc1918 : | ; network.trr.allow-rfc1918 : | ||
| Line 84: | Line 85: | ||
; network.trr.early-AAAA : | ; network.trr.early-AAAA : | ||
(default: false) For each normal name resolution, Firefox issues one HTTP request for A entries and another for AAAA entries. The responses come back separately and can come in any order. If the A records arrive first, Firefox will—as an optimization— continue and use them without waiting for the second response. If the AAAA records arrive first, Firefox will only continue and use them immediately if this option is set to | (default: false) For each normal name resolution, Firefox issues one HTTP request for A entries and another for AAAA entries. The responses come back separately and can come in any order. If the A records arrive first, Firefox will—as an optimization— continue and use them without waiting for the second response. If the AAAA records arrive first, Firefox will only continue and use them immediately if this option is set to ''true''. | ||
; network.trr.skip-AAAA-when-not-supported : | ; network.trr.skip-AAAA-when-not-supported : | ||
| Line 160: | Line 161: | ||
== See also == | == See also == | ||
* Initial | * Initial enhancement tracking: https://bugzilla.mozilla.org/show_bug.cgi?id=1434852 | ||
* The DNS-over-HTTPS spec: https://tools.ietf.org/html/rfc8484 | * The DNS-over-HTTPS spec: https://tools.ietf.org/html/rfc8484 | ||
* https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https | * https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https | ||