DoH disabled by default in Firefox
by from OpenBSD Journal on (#4Q3JW)
On Monday, Otto (otto@) committed a small but significant change to the Firefox port.
Date: Mon, 9 Sep 2019 12:50:35 -0600 (MDT)From: Otto Moerbeek <otto@[elided]>To: ports-changes@openbsd.orgSubject: CVS: cvs.openbsd.org: portsSender: owner-ports-changes@openbsd.orgCVSROOT: /cvsModule name: portsChanges by: otto@cvs.openbsd.org 2019/09/09 12:50:35Modified files: www/mozilla-firefox: Makefile www/mozilla-firefox/files: all-openbsd.jsLog message:Disable DoH by default. While encrypting DNS might be a good thing,sending all DNS traffic to Cloudflare by default is not a good idea.Applications should respect OS configured settings.The DoH settings still can be overriden if needed. ok landry@ job@
If you are running your own DNS over HTTPS (DoH) server, you may want to point Firefox at it using the network.trr.uri configuration option in about:config, and overriding the network.trr.mode setting from Otto's change to 3.For more details on how to configure Firefox's use of DoH, please see their wiki.