Hacker News Reader

So is this a way to lock down a client to shut out VPNs?

I assume it's to prevent reverse shells.

what you describe is already live and adopted in 100% of clients. DNSoverHTTPS.

you cannot disable it on IOS or android. Because it is owned by the APP not the OS.

Even firefox had to disable the setting (and about:config! making firefox on android pretty much garbage unless you install from fdroid) just so google would allow firefox on the play store.

Right, but I think this could be used at like a school to control what IPs are accessed on the network for even an untrusted device. So students couldn't bypass DNS blocks via VPN.

Reply on news.ycombinator.com