[rom1v]

On Android, in Settings, Network & internet, Private DNS, you can only provide one in "Private DNS provider hostname" (AFAIK).

Btw, I really don't understand why it does not accept an IP (1.1.1.1), so you have to give an address (one.one.one.one). It would be more sensible to configure a DNS server from an IP rather than from an address to be resolved by a DNS server :/

[quacksilver]

Private DNS on Android refers to 'DNS over HTTPS' and would normally only accept a hostname.

Normal DNS can normally be changed in your connection settings for a given connection on most flavours of Android.

[fs111]

No, it is not DNS over HTTPS it is DNS over TLS, which is different.

[lxgr]

Android 11 and newer support both DoH and DoT.

[politelemon]

Where is this option? How can I distinguish the two, the dialog simply asks for a host name

[eptcyka]

Cloudflare has valid certs for 1.1.1.1

[rom1v]

> Private DNS on Android refers to 'DNS over HTTPS'

Yes, sorry, I did not mention it.

So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback.

[ignoramous]

> So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback.

Not true. If the (DoH) host has multiple A/AAAA records (multiple IPs), any decent DoH client would retry its requests over multiple or all of those IPs.

[lxgr]

Does Cloudflare offer any hostname that also resolves to a different organization’s resolver (which must also have a TLS certificate for the Cloudflare hostname or DoH clients won’t be able to connect)?

[ignoramous]

Usually, for plain old DNS, primary and secondary resolvers are from the same provider, serving from distinct IPs.

[lxgr]

Yes, but you were talking about DoH. I don’t know how that could plausibly work.

[quaintdev]

Its DNS over TLS. Android does not support DNS over HTTPS except Google's DNS

[lxgr]

It does since Android 11.

[Tarball10]

For a limited set of DoH providers. It does not let you enter a custom DoH URL, only a DoT hostname.

[KoolKat23]

As far as I understand it, it's Google or Cloudflare?