diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-02-28 22:15:02 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-02-28 22:15:02 -0500 |
| commit | 135723436905f3917ab6f0f82fbbeeb57602fe7f (patch) | |
| tree | 0da25ddc77f90af19bd0322fe2850829beb793c1 | |
| parent | bd93da0d4722c24fb82121eafae32506168a60b2 (diff) | |
add custom DNS server question / answer
| -rw-r--r-- | static/faq.html | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/static/faq.html b/static/faq.html index ab6b74cb..78c071e9 100644 --- a/static/faq.html +++ b/static/faq.html @@ -66,6 +66,7 @@ bundled apps make by default?</a></li> <li><a href="#cellular-tracking">What does GrapheneOS do about cellular tracking and silent SMS?</a></li> + <li><a href="#dns">How do I use a custom DNS server?</a></li> <li><a href="#private-dns-ip">Why does Private DNS not accept IP addresses?</a></li> </ul> </li> @@ -362,6 +363,27 @@ sending texts or other data is not required or particularly useful to track devices connected to a network for an adversary with the appropriate access.</p> + <h3 id="dns"> + <a href="#dns">How do I use a custom DNS server?</a> + </h3> + + <p>It isn't possible to directly override the DNS servers provided by the network via + DHCP. Instead, use the Private DNS feature in Settings ➔ Network & internet ➔ + Advanced ➔ Private DNS to set the hostname of a DNS-over-TLS server. It needs to have + a valid certificate such as a free certificate from Let's Encrypt. The OS will look up + the Private DNS hostname via the network provided DNS servers and will then force all + other DNS requests through the Private DNS server. Unlike an option to override the + network-provided DNS servers, this prevents the network from monitoring or tampering + with DNS requests/responses.</p> + + <p>Configuring a static IP address for a network requires entering DNS servers + manually, but you should still use the Private DNS feature with it, and you shouldn't + misuse the static IP address option just to override the DNS servers.</p> + + <p>VPN service apps can also provide their own DNS implementation and/or servers, + including an alternate implementation of encrypted DNS. Private DNS takes precedence + over VPN-provided DNS and using Private DNS is still recommended with a VPN.</p> + <h3 id="private-dns-ip"> <a href="#private-dns-ip">Why does Private DNS not accept IP addresses?</a> </h3> |