Configure DNS-over-HTTPS in Firefox

Configure DNS-over-HTTPS in Firefox

REQUIRED: MOBILE DOH ADDRESS PREFIX

REPLACE {DOH PREFIX} with your DoH prefix.

Configuring DNS-over-HTTPS with Firefox Manually

  1. Click the menu button Menu and select Preferences.
  2. In the General panel, scroll down to Network Settings and click the Settings button.
  3. In the dialog box that opens, scroll down to Enable DNS over HTTPS.
  4. On: Select the Enable DNS over HTTPS checkbox. Select a provider or set up a custom provider. Off: Deselect the Enable DNS over HTTPS checkbox.
  5. Click the Use Provider drop-down under Enable DNS over HTTPS to select a provider.
  6. Change DNS Provider
    * Do not use this example address.
  7. Add your DOH URL* (https://{DOH PREFIX}.dns.securd.com/dns-query).
  8. Click OK to save your changes and close the window.
Configuring DNS-over-HTTPS with Firefox Options

about:config
network.trr.boostrapAddress=142.202.107.1
network.trr.custom_uri={DOH PREFIX}.dns.securd.com/dns-query
network.trr.mode=3
network.trr.uri={DOH PREFIX}.dns.securd.com/dns-query
network.trr.mode (https://wiki.mozilla.org/Trusted_Recursive_Resolver)
network.trr.disable-ECS = TRUE

network.trr.disable-ECS TRUE is a required setting. If you do not make this change, you queries will be blocked.

You should not change the mode manually, instead use the UI in the Network Settings section of about:preferences

• 0 - Off (default). use standard native resolving only (don't use TRR at all)
• 1 - Reserved (used to be Race mode)
• 2 - First. Use TRR first, and only if the name resolve fails use the native resolver as a fallback.
• 3 - Only. Only use TRR, never use the native resolver.
• Up to FF >= 73, this mode also requires the bootstrapAddress pref to be set.
• Starting with Firefox 74, setting the bootstrap address is no longer mandatory - the browser will simply bootstrap itself using regular DNS, unless the DoH server domain can't be resolved.
• The native resolver will still be used for portal detection and telemetry (Bug 1593873)
• 4 - Reserved (used to be Shadow mode)
• 5 - Off by choice. This is the same as 0 but marks it as done by choice and not done by default.

    • Related Articles

    • Configure DNS-over-HTTPS in Chrome

      REQUIRED: MOBILE DOH ADDRESS PREFIX REPLACE {DOH PREFIX} with your DoH prefix. {DoH Hostname}: https://{DOH PREFIX}.dns.securd.com/dns-query Setting up DoH in Chrome isn’t as easy as Firefox DoH. Google is behind Mozilla with rolling out support for ...

    • Configure DNS-over-HTTPS in Linux

      To configure DNS-over-HTTPS in Linux, you will need a DoH address prefix from a Virtual Site. Replace {doh_prefix} with your DoH prefix. systemd-resolved /etc/systemd/resolved.conf or /etc/systemd/resolved.conf.d/*.conf [Resolve] ...

    • Configure DNS-over-HTTPS for Windows 10 (Build 19628 or Newer)

      REQUIRED: Windows 10 (Build 19628 or Newer) REQUIRED: MOBILE DOH ADDRESS PREFIX REPLACE {DOH PREFIX} with your DoH prefix. Enable DoH in Windows 10 • Open the Registry Editor (regedit). • Navigate to the following registry key: ...

    • DNS Acronyms

      These acronyms and terms are frequently used when discussing securing DNS. DNS: Domain Name System. This is a system that translates human-readable domain names (such as www.example.com) into numerical IP addresses that computers can use to ...

    • Point Windows DNS to Securd

      Getting started with Windows (Agent and Agentless) Securd currently supports Windows 7, 8, 8.1, 10, Server 2008, Server 2012, Server 2016, and Server 2019 with .NET Framework 4.5+. Required Ports Securd endpoints will require access to connect to ...