Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-10-31 23:49:25 +01:00
Code Issues Projects Releases Wiki Activity
b1a0125674
shell-things/Windows/DoH
History
Aminda Suomalainen 1f474b534a
DohWellKnownServers.reg: add Mullvad Base
2023-11-26 09:08:57 +02:00
..
DohWellKnownServers.reg DohWellKnownServers.reg: add Mullvad Base 2023-11-26 09:08:57 +02:00
GPO-EnforceDoH.reg Windows\DoH: add GPO-EnforceDoH.reg & README.md 2021-10-14 09:46:44 +03:00
README.md Windows/DoH/README.md: mention TREX maps to Quad9 DoH 2023-02-25 16:32:04 +02:00

README.md

DNS over HTTPS in Windows 11

Requires Windows 11.

  • GPO-EnforceDoH.reg enables the group policy to require DoH. However it didn’t seem to work for me or it allowed me to set the DNS server to not use DoH.

  • DohWellKnownServers adds DoH support for multiple IPv4 & IPv6 addresses that Windows 11 isn’t shipping by default, currently:

    • Adguard
    • Cloudflare antimalware
    • DNS0 standard
      • Zero
      • Open
      • Kids
    • Mullvad
    • Mullvad Adblock
    • Quad9 ECS (Windows 11 defaults include Quad9 default)
    • TREX (actually points to Quad9 as per their documentation)

Configuration

Once Windows knows about the DoH servers (DohWellKnownServers.reg), DNS-over HTTPS can be enabled for:

  • All networks: Windows-I (Settings) -> Network & Internet -> Advanced network settings -> WLAN -> View additional properties -> DNS Server assignment -> Edit
    • Same place for Ethernet etc.
  • Specific network: Windows-I (Settings) -> Network & Internet -> WiFi -> Connected SSID -> DNS server assignment -> Edit
    • Note: if the all networks one is configured, there is a warning about it not being used.