Hacker News Reader

Comment by achairapart | Hacker News Reader

On iOS you can install a configuration profile that setup a DNS-over-HTTPS endpoint without touching the VPN settings. NextDNS does this when you install their app from what I remember. For other examples, see the profiles offered by AhaDNS.com[0].

On Android there is a Private DNS option where you can also setup a DNS-over-HTTPS endpoint of your choice.

These options may be also a better choice for battery life than a fake VPN connection.

[0]: https://github.com/AhaDNS/setup-guides/blob/master/Apple/iOS...

View on HN

Just did this last week, and it’s been life changing over mobile:

https://news.ycombinator.com/item?id=32041238#32041742

The android setting wherein you can input a standard DNS-over-HTTPS endpoint is sensible and sane.

Is it, in fact, correct that there is no such setting in iOS and has to be app-enabled ? Or are you saying I can either manage the device with configurator2 and put that setting in or I can install an app (like nextdns) that does it for me ?

Really frustrating that simple config options like DNS server and setting the name of your hotspot SSID are nonexistent in iOS ...

In iOS from what I know you need a configuration profile for that, I don't think it needs to be signed.

Yes, you can make one with Apple Configurator 2, but there is also some tooling/app that may help, like:

https://dns.notjakob.com/

https://github.com/kkk669/DNSecure

Is this really true? Because on macOS exactly this "workaround" does not work: https://github.com/AdguardTeam/AdGuardDNS/issues/214

Sorry, I can't tell for macOS, but on iOS i have a few DNS profiles and they all seems to work.

In addition to running a VPN? That's what the main comment was about, wasn't it? The profiles alone do work.

As I understood it was about blocking content (via DNS) *even without a fake VPN connection*. Once you run a VPN connection, most likely its DNS takes over, profile or not profile.

The very thing you're linking to is because of running conflicting software on MacOS.

Yes I know but that's what the parent comment(s) are about? Using a profile for DNS settings instead of a fake VPN because you can't run more than one active VPN at a time.

Reply on news.ycombinator.com