Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

network.trr.mode by default

  • 6 replies
  • 1 has this problem
  • 2 views
  • Last reply by philipp

Jacks0n
Jacks0n
more options

Hello,

May I know if there are plans to change network.trr.mode to 2 by default for all Firefox users? Privacy is a matter of concern nowadays and DPI/DNS inspecting is getting worst day by day.

We really have to work on this to keep trolls away from touching our internet freedom. It's getting worst day by day.

I really want to know when exactly "network.trr.mode = 2" will happen which will solve lots of problems.

Firefox team should really consider this by default in future releases: network.security.esni.enabled = True network.trr.mode = 2 ( Or at least network.trr.mode = 1 )

The faster this happens the better as it will keep the internet trolls away.

Thanks in advance for the awesome browser.

Hello, May I know if there are plans to change network.trr.mode to 2 by default for all Firefox users? Privacy is a matter of concern nowadays and DPI/DNS inspecting is getting worst day by day. We really have to work on this to keep trolls away from touching our internet freedom. It's getting worst day by day. I really want to know when exactly "network.trr.mode = 2" will happen which will solve lots of problems. Firefox team should really consider this by default in future releases: network.security.esni.enabled = True network.trr.mode = 2 ( Or at least network.trr.mode = 1 ) The faster this happens the better as it will keep the internet trolls away. Thanks in advance for the awesome browser.

All Replies (6)

WestEnd
WestEnd
more options

So what is exactly the problem that is happening?

Jacks0n
Jacks0n Question owner
more options

WestEnd said

So what is exactly the problem that is happening?

Keeping SNI and DNS in plain text is the biggest problem. Don't you think that's a big problem?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

I don't think that TRR is ready to be enabled by default. There will probably be a setting in Options/Preferences to enable TRR just like there is for other features like blocking content.

  • Bug 1455425 - expose TRR (DNS over HTTPS) configuration in browser settings
  • Bug 1453207 - Enabling DNS over HTTPS should respect system hosts file
Jacks0n
Jacks0n Question owner
more options

Seems reasonable but having "network.trr.mode = 1" as default won't hurt as 1 lets Firefox pick whichever is faster.

Hopefully someday We will have it enabled by default.

Thanks for the info.

Mace2
Mace2
more options

I think the value should be network.trr.mode = 3. If the browser falls back to your operating system it is no longer secure and you won't know when ff falls back

philipp
philipp
  • Moderator
more options

there are no simple answers here - lots of other people are fearing that a centralised dns server would provide less privacy for them as what's offered by their local ISP (that would only be the case in in legislations with strong privacy guarantees - elsewhere it might be the opposite)...