diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index b5f31a21..17fa91ef 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -81,6 +81,11 @@
     },
     "DNSOverHTTPS": {
       "Enabled": true,
+      "ExcludedDomains": [
+        "http.badssl.com",
+        "norwegianwifi.com"
+      ],
+      "Fallback": true,
       "Locked": true,
       "ProviderURL": "https://dns11.quad9.net/dns-query"
     },