search

pyllyukko / user.js

user.js -- Firefox configuration hardening
MIT License
2.76k stars 232 forks source link

Turn off Trusted Recursive Resolver (avoid Cloudflare DNS queries) #457

Closed brainfucksec closed 5 years ago

brainfucksec commented 5 years ago

Explicitly Turn Off Trusted Recursive Resolver (DNS over HTTPS):

https://wiki.mozilla.org/Trusted_Recursive_Resolver

Set network.trr.mode to 2 to make DNS Over HTTPS the browser's first choice but use regular DNS as a fallback (0 is "off by default", 1 lets Firefox pick whichever is faster, 3 for TRR only mode, 5 to explicitly turn it off).

user_pref("network.trr.mode", 5);

https://github.com/pyllyukko/user.js/compare/master...brainfucksec:patch-1?expand=1#diff-b00df6cb4137c00991376cd319d35348

in this way the browser uses the DNS set in the system.