Skip to main content

Disabling Browser DOH

Aaron
In this article:
    Applicable to:
    • Twingate Component: Client | Resources
    • Third Party Applications: Google Chrome, Microsoft Edge, Mozilla Firefox

    Overview

    DNS-over-HTTPS (DoH) is increasingly being enabled by default within web browsers to encrypt all DNS lookups. Twingate relies on a DNS proxy in order to intercept user traffic for private DNS Resources. Because DoH encrypts all DNS requests, this will result in private DNS resources protected by Twingate from being accessible to users. In order to prevent browsers bypassing the Twingate Client, we recommend disabling this feature.

    Process

    Note: If your organization uses an MDM solution for device management, it is very likely that these settings can be defined centrally and pushed out to all users.

     

    Google Chrome

    DoH is enabled by default on Google Chrome version 83 and later. It can be disabled as follows:

    1. In Chrome, click the menu button and then click Settings.
    2. Go to Privacy and security and then Security.
    3. Scroll to Use Secure DNS and uncheck the option.
    4. Restart the browser.

    1968

     

    Microsoft Edge

    Microsoft Edge, it can be disabled as follows:

    1. Click the menu button and then click Settings.
    2. In the search box type 'Secure DNS'.
    3. Scroll to Use secure DNS to specify how to lookup the network address for websites and uncheck the option.
    4. Restart the browser.

    1982

    Mozilla Firefox

    DoH is enabled by default on Firefox. It can be disabled as follows:

    1. In Mozilla Firefox, click the menu button and then click Settings.
    2. Scroll to the Network Settings section and click the Settings button.
    3. Scroll down to the Enable DNS over HTTPS option and uncheck the box.
    4. Click OK to save your settings.

    2342

    Related articles