This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Rohkem teavet

Teema arhiveeriti. Please ask a new question if you need help.

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

  • 2 vastust
  • 1 on selline probleem
  • 11 views
  • Viimati vastas Mike Kaply

dcrawford1
dcrawford1
more options

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

Is there a global way to turn off dns over https and also make firefox use the system certificate store? We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

I can flag your question to move to the "Enterprise" support forum, but in short, I think the answer is "policy":

Mike Kaply
Mike Kaply
  • Moderator
more options

Yes, you can do this with policy.

https://github.com/mozilla/policy-templates/#dnsoverhttps https://github.com/mozilla/policy-templates/#certificates--importenterpriseroots