Hacker News new | ask | show | jobs
by quacksilver 334 days ago
Private DNS on Android refers to 'DNS over HTTPS' and would normally only accept a hostname.

Normal DNS can normally be changed in your connection settings for a given connection on most flavours of Android.
4 comments
fs111 334 days ago
No, it is not DNS over HTTPS it is DNS over TLS, which is different.
link
lxgr 334 days ago
Android 11 and newer support both DoH and DoT.
link
politelemon 334 days ago
Where is this option? How can I distinguish the two, the dialog simply asks for a host name
link
eptcyka 334 days ago
Cloudflare has valid certs for 1.1.1.1
link
rom1v 334 days ago
> Private DNS on Android refers to 'DNS over HTTPS'

Yes, sorry, I did not mention it.

So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback.

link
ignoramous 334 days ago
> So if you want to use DNS over HTTPS on Android, it is not possible to provide a fallback.

Not true. If the (DoH) host has multiple A/AAAA records (multiple IPs), any decent DoH client would retry its requests over multiple or all of those IPs.

link
lxgr 334 days ago
Does Cloudflare offer any hostname that also resolves to a different organization’s resolver (which must also have a TLS certificate for the Cloudflare hostname or DoH clients won’t be able to connect)?
link
ignoramous 334 days ago
Usually, for plain old DNS, primary and secondary resolvers are from the same provider, serving from distinct IPs.
link
lxgr 334 days ago
Yes, but you were talking about DoH. I don’t know how that could plausibly work.
link
ignoramous 334 days ago
> but you were talking about DoH

DoH hosts can resolve to multiple IPs (and even different IPs for different clients)?

Also see TFA

  It's worth noting that DoH (DNS-over-HTTPS) traffic remained relatively stable as most DoH users use the domain cloudflare-dns.com, configured manually or through their browser, to access the public DNS resolver, rather than by IP address. DoH remained available and traffic was mostly unaffected as cloudflare-dns.com uses a different set of IP addresses.
link
quaintdev 334 days ago
Its DNS over TLS. Android does not support DNS over HTTPS except Google's DNS
link
lxgr 334 days ago
It does since Android 11.
link
Tarball10 334 days ago
For a limited set of DoH providers. It does not let you enter a custom DoH URL, only a DoT hostname.
link
KoolKat23 334 days ago
As far as I understand it, it's Google or Cloudflare?
link