Looking to see if anyone is working on more universal DoH support for the PiHole. Cloudflared is nice, but locks one into the CloudflareDNS. I'd like to have the flexibility to use Cleanbrowsing or OpenDNS for their filtering ability. They currently support DoH, but at a browser level.

What advantage(s) do you see with running DoH. Are you hoping to gain privacy, security, ?

You actually bring up a good point and I've taken a step back to re-evaluate my view on this topic and approach. My concern has been privacy which includes DNS snooping by my ISP, along with some DNS hijacking concerns. After I posted the discussion here, I dug more into the topic of DOH from my rou…

Customarily, your ISP may analyse your DNS traffic and try to monetarise on it. When using Pi-hole (or your router config) to bypass your ISP's DNS servers, your ISP won't be able to log your requests directly at their DNS server, but they still could filter port 53 to much the same effect. Encryp…

All correct. But at the end the day, I get to tighten the reigns a little and determine who I trust most by having that DNS level of control and HTTPS connection security. Setup correctly, I'd know I'm only connecting to the DNS of my choice. For me, using DNS level filter for the kids accomplishes…

I'm currently using, but I'm wondering if it isn't possible to use (non logging) DOH as upstream instead? There exists a guide for cloudfare, but their reputation isn't that good. I would like to use a trusty non logging/non US DOH instead. How can this be achieved? Many thanks for the explanation. …

[image] eddydc: I would like to use a trusty non logging/non US DOH instead. How can this be achieved? You should inquire about this with your chosen trusty provider. They should be able to point you to the appropriate DoH software packages. Once installed, configure Pi-hole to use only tha…

I guess that's the issue. So far, I didn't see no non logging DOH services having the same functionality as cloudfared. I was wondering if there wasn't something general that could be used as DOH 'proxy'

Use DoT, it's better. [image] GitHub - getdnsapi/stubby: Stubby is the name given to a mode of using getdns... Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).

[image] eddydc: I would like to use a trusty non logging/non US DOH instead As Dan noted, DoT is a better option than DoH. Both provide the encryption you seek. If you want an upstream server that has a good privacy policy, consider Quad 9. These configuration lines in unbound will get you …

As DOT would be slower, I guess I would stick to my normal unbound config as documented in the PiHole site. Thx for the info anyway.

DOH Support for Cleanbrowsing DNS or OpenDNS

General Customizing Pi-hole

DanSchaper June 14, 2021, 7:59pm 9

Use DoT, it's better.