Hacker News new | ask | show | jobs
by dogecoinbase 2584 days ago
It already does. This is the purpose of putting a DNS-over-HTTPS resolver into the browser, so you can't bypass it with local resolvers.
2 comments

So you block access to Google's DNS (except for your local DNS server) on your router.

And so the arms race continues.

Couldn't I sign my own pi-hole and add the certificate to my phone/computer?
No use if e.g. Chrome hardcodes Google's servers and ignores the system ones.
Could you hardcode the ip addresses in your own NAT?
This is, in fact, already sometimes necessary since there are things that will hard code 8.8.8.8.