Reply To: DNS-over-HTTPS (DoH) providers not classified as "Proxy & VPN" or similar
June 30, 2020 at 8:47 pm
Sadly, no. The following DoH and DoT providers are still not blocked:
- 2.dnscrypt-cert.ns1.developer.li
- 2.dnscrypt-cert.ns2.developer.li
- 2.dnscrypt-cert.ns3.ca.luggs.co
- 2.dnscrypt-cert.ns4.ca.luggs.co
- 2.dnscrypt-cert.opennic.i2pd.xyz
- 2.dnscrypt-cert.opennic.peer3.famicoman.phillymesh.net
- 2.dnscrypt-cert.oszx.co
- 2.dnscrypt.cert.jolteon.boothlabs.me
- ads-doh.securedns.eu
- bornfiber.anycast.censurfridns.dk
- deic-lgb.anycast.censurfridns.dk
- deic-ore.anycast.censurfridns.dk
- dns-tls.bitwiseshift.net
- dns.bitgeek.in
- dns.flatuslifir.is
- dns.larsdebruin.net
- dns.neutopia.org
- dns.twnic.tw
- dns2.developer.li
- dnscrypt.nl.public-dns.lchimp.com
- dnsotls.lab.nic.cl
- dnsovertls.sinodun.com
- dnsovertls1.sinodun.com
- dnsovertls2.sinodun.com
- dnsovertls3.sinodun.com
- doh-fi.blahdns.com
- doh-ipv6.crypto.sx
- doh.applied-privacy.net
- doh.blockerdns.com
- doh.dnslify.com
- doh.xfinity.com
- dohdot.coxlab.net
- dot-ch.blahdns.com
- dot-de.blahdns.com
- dot-jp.blahdns.com
- dot.securedns.eu
- dot1.appliedprivacy.net
- dot1.dnswarden.com
- dot2.dnswarden.com
- ea-dns.rubyfish.cn
- edns.233py.com
- getdnsapi.net
- iana.tenta.io
- jolteon.boothlabs.me
- jp.gridns.xyz
- kaitain.restena.lu
- kracon.anycast.censurfridns.dk
- mozilla.cloudflare-dns.com
- ndns.233py.com
- nl.public-dns.lchimp.com
- ns1.dnsprivacy.at
- ns2.dnsprivacy.at
- odvr.nic.cz
- opennic.peer3.famicoman.phillymesh.net
- opennic.tenta.io
- privacydns.go6lab.si
- private.canadianshield.cira.ca
- protected.canadianshield.cira.ca
- public.dns.iij.jp
- rgnet-iad.anycast.censurfridns.dk
- sdns.233py.com
- security.cloudflare-dns.com
- sg.gridns.xyz
- solido.anycast.censurfridns.dk
- tls-dns-u.odvr.dns-oarc.net
- unicast.censurfridns.dk
- uw-dns.rubyfish.cn
- wdns.233py.com
- <i>security-filter-dns.cleanbrowsing.org</i>
Additionally, the previously mentioned Firefox settings illustrate the fact that the DoH services offered by CleanBrowsing for basic security filtering can be used to circumvent the Family Filter DNS service offered by CleanBrowsing over the regular DNS protocol. Solving this issue would require adjustments to the domain names used to offer the DoH service and classifying them accordingly. While separate domains were correctly used for DNS over TLS, the Security Filter is not yet classified as a VPN or Proxy.