[fn-mote]

Last comments are from 2025.

> If we disable "override DNS servers", the DNS leaks don't happen.

No verification from 2026 that this is still an issue, but also… sounds like it works as desired in most circumstances?

[traceroute66]

I employ a "minimum trust" attitude to anything Tailscale and that includes not using their DNS.

So "use tailscale DNS" = off and install a DoH profile on devices.