As shown in the screenshot, my Amazon eero Pro 6E is downgrading Private DNS (DNS Over TLS) requests from my Android phone to unencrypted port 53 requests. This makes the “Private DNS” feature entirely pointless and not offer any security, does it not?

I have an Android phone which I can share its internet connection via Ethernet tethering through an adapter (Ethernet to USB-C adapter). The device (camera) which is connected to the phone is able to utilise the internet connection successfully. I want to access the device from my Android phone using its local IP address in the web browser of my Android phone since that device (camera) has a webapp running on it which allows accessing its features and configurations. However when I type in the local IP address (or the local host name) of the device in the browser it times out (the IP address is correct and I have double checked this multiple ways). 1. is this possible on Android? 2. how can I achieve this? 3. is this a DNS problem? (my Android "Private DNS Mode" is set to "Automatic" which is the default option. I can achieve this using a laptop running windows without any issues but being able to use a mobile phone is a lot more convenient, as it means I won't have to carry a laptop with me.

Device is on Android 9. NOT rooted. I want to set the DNS to CIRA (or Cloudfare or whatever, not the point). Yes my wifi router is already set to proper DNS. If I am not at home I want the device to have set DNS. Question 1: Is how do I do I set DNS on Android for Wifi but also for Mobile connection? I looked at a couple of sites recommend to modify the Wifi setting as the easiest method. I don't want to install 3rd party VPN loopback tool because I use extenral VPN so I don't know how that will work together. This talks about 8 methods to set the DNS. Only handful would apply to me: https://forum.xda-developers.com/t/guide-how-to-change-dns-in-android-device-8-methods.3273769/ However, this page talks about setting up yet another way. https://www.zdnet.com/article/how-to-turn-on-private-dns-mode-on-android-and-why-you-should/ So I am a bit confused. It looks like the 2nd link is not setting the specific Wifi. Is it going to apply to LTE mobile connection? My device offers both ways to set up: via *Settings/Network&Internet/Advanced/Private DNS* ... or via *Settings/Wi-Fi/Modify network/Advanced options/IP Settings* So is this the best way to setup via the Private DNS? Question 2: What do I enter in the box "Private DNS", is both word domain and the IP address okay? Question 3: If I root my device, do the rooted methods work better?

I want to use a custom DNS that works perfectly well on my Android phone (Pixel 6 Pro) using "Private DNS" however, does not work on my Google made Chromebook (Pixelbook, so also technically part of the Pixel family) that utilizes "Secure DNS." Everything I can find suggests that the differences between the two privacy-enhancing DNS offerings exists in name only, but my experience with this in particular is telling me otherwise. It may be relevant to mention that I'm not using the traditional ip/hostname but rather the alternative host name, as that's all that Blokada provides. At least for Blokada Cloud use, anyway. However, come to think of it, I think I use an alternative hostname for Quad9 and that's working on the Pixelbook, so who knows? Anyway, I'm hopeful somebody more knowledgeable than I on the subject might be able to share some insight as to why I'm having so much difficulty getting something that works with Private DNS working using Secure DNS Ps I confirmed my suspicion. On the Pixelbook, "https://dns.quad9.net/dns-query " works in place of 9.9.9.9/149.112.112.112 however "Google--Google--Pixelbook-**********.cloud.blokada.org" fails, everytime... Without fail. Also, I'm not sure I'd even have the option to use it otherwise, but I have enabled the necessary flags to use Secure DNS

The Android 12 private DNS setting is unfortunately not set up to accept an IP address, only a hostname. Thus, it clearly must resolve a standard DNS query before doing the TLS or HTTPS query. I frequently find my connection working but with no standard DNS response. Is there any way on Android 12 to completely bypass standard DNS?

At home I can use the AdGuard DNS via settings -> WiFi & network -> private DNS -> private DNS provider hostname, and setting that hostname to dns.adguard.com. In many public places where I do have WiFi without using this DNS, using AdGuard gives the error "Private DNS server cannot be accessed" and WiFi is not used. Specifically the EduRoam university network does not work with the AdGuard DNS. It means I often switch back to private DNS -> automatic, but in practice that seems to work the same as private DNS -> off: even at home where the AdGuard DNS would work, it is not being used. Does anyone know if there's another setting that would make AdGuard usable in those public places, or at least to have an "automatic" option that does at least use AdGuard when possible?

In my pursuit to block porn, I installed many web filtering options. Currently, I am using Open Dns free version and Blockerhero for blocking specific domains and apps. However my issue is that sometimes these blocked websites popup with new names. For instance: > 1filmy4wap.biz >https://tode793.com/selinte-tuition-class-2022-e01-02-yessma-seris-720p-480p-webhd-x264/ These post erotic content and are replica of each other. How many domains can I block, it seems almost impossible. Is there any solution anyone can offer? Like anything with which I can block domains more easily. Or block those services which have pirated content like streamsb.

I installed the CleanBrowsing app on my Redmi 9a (Android 10) phone and it asks for accessibility permission. I give that permission, but when I activate the family filter, it goes to Private DNS on Settings and asks me to save it, and then it does nothing, just goes back to the family filter option again. It should ask me for device admin permission but it doesn't. On my other Samsung (Android 12) phone, this app works very well.

S22 Android 12 device here. I have my own DNS server on a local network. Phone seems to pick up local DNS, but it will not address devices using fully-qualified name. Example (in adb):

g0q:/ $ ping nas.mydomain.local                                                                                                                                                         
ping: unknown host nas.mydomain.local
2|g0q:/ $ ping nas                                                                                                                                                                        
PING nas.mydomain.local (10.1.1.26) 56(84) bytes of data.
64 bytes from 10.1.1.26: icmp_seq=1 ttl=64 time=2.41 ms
64 bytes from 10.1.1.26: icmp_seq=2 ttl=64 time=13.4 ms
64 bytes from 10.1.1.26: icmp_seq=3 ttl=64 time=10.7 ms
64 bytes from 10.1.1.26: icmp_seq=4 ttl=64 time=16.1 ms

Same is happening in firefox and other apps. I can access host via https://hostname , but not https://hostname.mydemain.local . Anyone knows what magic is happening here and how to turn it off? UPDATE: what I suspect might be happening is that .local domain seems to have a special meaning . I am not sure what is different in Samsung implementation, since GrapheneOS (also based on android 12) handles these hostnames fine. If someone has any suggestions how to disable this feature, please let me know

note: there are a lot of DNS questions on android.stackexchange.com I'm creating this question because all the other DNS questions were for different scenarios and I wanted to keep this up to date over the years. I do not want my DNS queries to be unencrypted whenever I am doing any internet activity (either through cellular mobile internet or through wifi with home internet). ### How do you configure secure DNS (aka "private DNS") with cloudflare?