netblue30 / fdns

Firejail DNS-over-HTTPS Proxy Server
GNU General Public License v3.0
125 stars 30 forks source link

Add --allow-local-doh option #34

Closed sblighting closed 4 years ago

sblighting commented 4 years ago

From @rusty-snake in https://github.com/netblue30/fdns/pull/32

The ESNI implementation of firefox requires ATM that firefox resolves DNs itself suing its own DoH implementation. See the bugzilla ticket [1]. Some users might want this. Therefore it would be help full to have an --allow-local-doh options.

ESNI references: about:config: network.security.esni.enabled https://bugzilla.mozilla.org/show_bug.cgi?id=1500289 [1] https://www.cloudflare.com/ssl/encrypted-sni (Test) https://en.wikipedia.org/wiki/ESNI https://blog.cloudflare.com/esni/

rusty-snake commented 4 years ago

Typo (from me), of curse we need only one option~s~.

--allow-local-doh options.

startx2017 commented 4 years ago

Did some testing, looks fine.