[netheril96]

I guess you can run your local DNS server and point the browser to that. The local DNS server can do all the filtering you want, and forward the filtered out requests to the outside DNS server.

[zelly]

the doomsday scenario the top-level comment mentioned is if they disabled that option. it's possible but very unlikely because it would make that browser unusable for many corporate networks.

[wvenable]

What corporate networks don't allow outbound HTTPS?

[zelly]

they run their own internal DNS resolvers

[wvenable]

Yes, but DNS over HTTPS by passes internal DNS resolvers and because it's HTTPS the corporate firewall would have no idea this is happening.