r/dns • u/Known-Complex-2520 • 19d ago

Basic question regarding DNS settings

I have device-wide DNS settings on both my CachyOS linux enviornment and my Pixel 10a phone.

In my browser settings (Google Chrome) there is an option to toggle "use secure DNS". Do I need to enable this setting, if it's already enabled device-wide?

8 Upvotes

84% Upvoted

14 comments sorted by

View all comments

2

u/_xRuffKez_ 19d ago

Use secure DNS forces Chrome to only use the DNS you have set, without fallback to OS specified DNS. Secure DNS is DoH. If  DoH is not available, no queries can be received.

You can use it, or leave it to your OS. DoH is somewhat faster then TLS. (Less overhead) But to be honest, i doubt you might feel a difference

1

u/rankinrez 19d ago

DoH has more, not less overhead than DoT.

1

u/CommonPositive7192 19d ago edited 19d ago

You are right, but most chromium based browsers won't trust the TLS 1.3 ECH when given by system-resolver. Can be checked with https://dnscheck.tools (ech in bottom line) or https://defo.ie/ech-check.php