Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

為了改善您的使用體驗,本網站正在進行維護,部分功能暫時無法使用。若本站的文件無法解決您的問題,想要向社群發問的話,請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問,我們的社群成員將很快會回覆您的疑問。

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

DNS over HTTPS stopped working (along with eSNI), in Chrome - it works fine

  • 12 回覆
  • 1 有這個問題
  • 24 次檢視
  • 最近回覆由 Owyn

more options

Tried with google dns too - same result, on cloudflare forum I discovered it was a browser problem cuz with Chrome DNS over HTTPS works just fine - see screens

thread on cloudflare: https://community.cloudflare.com/t/help-me-debug-fix-dns-pass-security-check-test-in-firefox-sdns-esni-issue/161822/

Tried with google dns too - same result, on cloudflare forum I discovered it was a browser problem cuz with Chrome DNS over HTTPS works just fine - see screens thread on cloudflare: https://community.cloudflare.com/t/help-me-debug-fix-dns-pass-security-check-test-in-firefox-sdns-esni-issue/161822/
附加的畫面擷圖

所有回覆 (12)

more options

I'm green across the board, here (w/ESNI)

Double-check your configuration.

more options

RobertJ said

I'm green across the board, here (w/ESNI) Double-check your configuration.

Any suggestions on how should I double-check my clean profile configuration?

more options

Enter about:config in the address bar and press enter select "Accept the Risk and Continue" in the search bar at the top enter network.trr.mode double-click on the line and set the value to 2 then, enter network.security.esni.enabled in the search bar double-click on the line to set the value to True

Restart Firefox.

Check your Test again.

more options

Just a little bit of research will tell you that ESNI only works with sites that are participating with Cloudflare in the ESNI project.

more options

RobertJ said

Enter about:config in the address bar and press enter select "Accept the Risk and Continue" in the search bar at the top enter network.trr.mode double-click on the line and set the value to 2 then, enter network.security.esni.enabled in the search bar double-click on the line to set the value to True Restart Firefox. Check your Test again.

Those settings are already set that way, just checked. - same result - sDNS and eSNI aren't shown working by the test in Firefox (in chrome sDNS is shown working fine)

Just a little bit of research will tell you that ESNI only works with sites that are participating with Cloudflare in the ESNI project.
Pretty sure the site which is supposed to check whenever eSNI works or not - supports eSNI
more options

You might have an extension which is interfering with DoH and/or ESNI.

Disable any extensions that could be suspect and restart Firefox. Then, try your Cloudflare Test again.

more options

RobertJ said

You might have an extension which is interfering with DoH and/or ESNI. Disable any extensions that could be suspect and restart Firefox. Then, try your Cloudflare Test again.

There aren't any extensions on the clean profile I created for the test.

and the internet cable is connected directly to the PC without any kind of routers

由 Owyn 於 修改

more options

Go to: 3-bar Menu button -> Options -> General page scroll all the way down to the bottom click on the Network Settings - Settings button and in the Connection settings window check that Use Provider is set to Cloudflare (Default)

more options

RobertJ said

Go to: 3-bar Menu button -> Options -> General page scroll all the way down to the bottom click on the Network Settings - Settings button and in the Connection settings window check that Use Provider is set to Cloudflare (Default)

Yes, it's set that way.

more options

Owyn, I'm out of ideas. I'll ask for help and maybe someone else can help, also.

more options

You can create a new profile as a quick test to see if your current profile is causing the problem.

See "Creating a profile":

If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.


Boot the computer in Windows Safe mode with network support to see if that has effect in case security software is causing problems.

more options

Yes, I was testing it all out with a clean profile

And apparently now Windows 10 safe mode with networking doesn't support... networking:

so I can't test it that way

I have no security software running (or loaded) or even any network filters like WinDivert, only windows firewall (because it's a required component for internet sharing (with my notebook) to work)

but isn't it weird if something is preventing sDNS (and eSNI) from working on my Firefox but not on my Chrome (sDNS is shown working fine there after I enable it there), is it implemented differently in browsers? can it even be implemented differently hmm?

由 Owyn 於 修改