Local DNS https record

[FlorianBaaske]

@chrislph

How is that set up? Are you using Pi-hole's Local DNS to take precedence over the external upstream DNS, and then when you are external the real records are the only ones seen?

yes exactly.

@chrislph

f you're not using HTTPS records for real anywhere else internally you can block all HTTPS query types, thus preventing the iPhone from "working around" the otherwise-working setup. Create a regex blacklist entry for

.*;querytype=HTTPS

Does that fix the iPhone and make it work the way you want?

Would it be possible to block HTTPS requests just for one domain, like
ha.flomain.de;querytype=HTTPS

Many Thanks
Florian